{"setdomainname": [{"reason": ["uts_namespace->user_ns"], "call": "setns"}], "name_to_handle_at": [{"reason": ["super_block->s_export_op"], "call": "syncfs"}, {"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["super_block->s_export_op"], "call": "ustat"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["super_block->s_export_op"], "call": "umount"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["path->dentry", "path->mnt"], "call": "getcwd"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["super_block->s_export_op", "path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["path->dentry", "path->mnt"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["super_block->s_export_op", "path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "mq_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "syncfs": [{"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "lseek": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "rt_sigtimedwait": [{"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "msgrcv"}, {"reason": ["siginfo->si_code", "task_struct->timer_slack_ns", "mm_segment_t->seg", "siginfo->si_signo"], "call": "kill"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "sched_getaffinity"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "sched_setparam"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "ioprio_set"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "getppid"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "capget"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "sched_setaffinity"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "signal"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "umount"}, {"reason": ["siginfo->si_signo", "siginfo->si_code"], "call": "timer_create"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "sched_rr_get_interval"}, {"reason": ["siginfo->si_signo", "siginfo->si_code"], "call": "rt_sigqueueinfo"}, {"reason": ["siginfo->si_signo", "siginfo->si_code"], "call": "tgkill"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "rt_sigprocmask"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "setsid"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "sched_setattr"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "setpgid"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "getsid"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "prlimit64"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "perf_event_open"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "rt_sigaction"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "getpgid"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "sigaction"}, {"reason": ["siginfo->si_signo", "siginfo->si_code"], "call": "rt_tgsigqueueinfo"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "setns"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "fork"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "get_robust_list"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "sched_getscheduler"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "ptrace"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "vfork"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "prctl"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "move_pages"}, {"reason": ["siginfo->si_signo", "siginfo->si_code"], "call": "rt_sigreturn"}, {"reason": ["siginfo->si_signo", "siginfo->si_code"], "call": "tkill"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "setpriority"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "clone"}, {"reason": ["mm_segment_t->seg", "task_struct->timer_slack_ns"], "call": "sched_getparam"}], "vmsplice": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags", "file->f_mode"], "call": "epoll_ctl"}, {"reason": ["fd->flags", "file->f_mode"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["fd->flags", "file->f_mode"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags", "file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "setfsuid": [{"reason": ["cred->user_ns", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["cred->user_ns"], "call": "getresuid16"}, {"reason": ["cred->user_ns"], "call": "getresgid"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["cred->user_ns"], "call": "setgid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["cred->user_ns"], "call": "capset"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["cred->user_ns"], "call": "getresgid16"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["cred->user_ns"], "call": "setfsgid"}, {"reason": ["cred->user_ns"], "call": "unshare"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["cred->uid", "cred->user_ns", "cred->suid", "cred->euid", "cred->fsuid"], "call": "setreuid"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["cred->user_ns"], "call": "epoll_create1"}, {"reason": ["cred->user_ns"], "call": "getresuid"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["cred->user_ns"], "call": "setresgid"}, {"reason": ["cred->user_ns"], "call": "setregid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["cred->user_ns"], "call": "getgroups16"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["cred->user_ns", "cred->fsuid"], "call": "faccessat"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->uid", "cred->user_ns", "cred->suid", "cred->euid", "cred->fsuid"], "call": "setresuid"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["cred->uid", "cred->user_ns", "cred->suid", "cred->euid", "cred->fsuid"], "call": "setuid"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["cred->user_ns"], "call": "getgroups"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "msgrcv": [{"reason": ["msg_msg->m_ts"], "call": "mq_timedreceive"}, {"reason": ["msg_msg->m_ts"], "call": "mq_timedsend"}, {"reason": ["msg_msg->m_ts"], "call": "msgsnd"}], "uname": [{"reason": ["task_struct->personality"], "call": "keyctl"}, {"reason": ["task_struct->personality"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->personality"], "call": "msgrcv"}, {"reason": ["task_struct->personality"], "call": "kill"}, {"reason": ["task_struct->personality"], "call": "sched_getaffinity"}, {"reason": ["task_struct->personality"], "call": "sched_setparam"}, {"reason": ["task_struct->personality"], "call": "ioprio_set"}, {"reason": ["task_struct->personality"], "call": "personality"}, {"reason": ["task_struct->personality"], "call": "getppid"}, {"reason": ["task_struct->personality"], "call": "mq_timedreceive"}, {"reason": ["task_struct->personality"], "call": "capget"}, {"reason": ["task_struct->personality"], "call": "sched_setaffinity"}, {"reason": ["task_struct->personality"], "call": "signal"}, {"reason": ["task_struct->personality"], "call": "semtimedop"}, {"reason": ["task_struct->personality"], "call": "umount"}, {"reason": ["task_struct->personality"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->personality"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->personality"], "call": "setsid"}, {"reason": ["task_struct->personality"], "call": "sigaltstack"}, {"reason": ["task_struct->personality"], "call": "sched_setattr"}, {"reason": ["task_struct->personality"], "call": "migrate_pages"}, {"reason": ["task_struct->personality"], "call": "getitimer"}, {"reason": ["task_struct->personality"], "call": "setpgid"}, {"reason": ["task_struct->personality"], "call": "getsid"}, {"reason": ["task_struct->personality"], "call": "prlimit64"}, {"reason": ["task_struct->personality"], "call": "perf_event_open"}, {"reason": ["task_struct->personality"], "call": "rt_sigaction"}, {"reason": ["task_struct->personality"], "call": "getpgid"}, {"reason": ["task_struct->personality"], "call": "getpriority"}, {"reason": ["task_struct->personality"], "call": "sigaction"}, {"reason": ["task_struct->personality"], "call": "setns"}, {"reason": ["task_struct->personality"], "call": "fork"}, {"reason": ["task_struct->personality"], "call": "get_robust_list"}, {"reason": ["task_struct->personality"], "call": "mq_timedsend"}, {"reason": ["task_struct->personality"], "call": "sched_getscheduler"}, {"reason": ["task_struct->personality"], "call": "ptrace"}, {"reason": ["task_struct->personality"], "call": "sched_getattr"}, {"reason": ["task_struct->personality"], "call": "getrusage"}, {"reason": ["task_struct->personality"], "call": "sched_setscheduler"}, {"reason": ["task_struct->personality"], "call": "setitimer"}, {"reason": ["task_struct->personality"], "call": "ioprio_get"}, {"reason": ["task_struct->personality"], "call": "vfork"}, {"reason": ["task_struct->personality"], "call": "prctl"}, {"reason": ["task_struct->personality"], "call": "move_pages"}, {"reason": ["task_struct->personality"], "call": "setpriority"}, {"reason": ["task_struct->personality"], "call": "clone"}, {"reason": ["task_struct->personality"], "call": "sched_getparam"}], "kill": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "io_getevents": [{"reason": ["task_struct->timer_slack_ns"], "call": "keyctl"}, {"reason": ["task_struct->timer_slack_ns"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->timer_slack_ns"], "call": "msgrcv"}, {"reason": ["task_struct->timer_slack_ns"], "call": "kill"}, {"reason": ["mm_struct->ioctx_table"], "call": "swapoff"}, {"reason": ["task_struct->timer_slack_ns"], "call": "sched_getaffinity"}, {"reason": ["task_struct->timer_slack_ns"], "call": "sched_setparam"}, {"reason": ["task_struct->timer_slack_ns"], "call": "ioprio_set"}, {"reason": ["mm_struct->ioctx_table"], "call": "remap_file_pages"}, {"reason": ["task_struct->timer_slack_ns"], "call": "getppid"}, {"reason": ["task_struct->timer_slack_ns"], "call": "mq_timedreceive"}, {"reason": ["task_struct->timer_slack_ns"], "call": "capget"}, {"reason": ["task_struct->timer_slack_ns"], "call": "sched_setaffinity"}, {"reason": ["task_struct->timer_slack_ns"], "call": "signal"}, {"reason": ["task_struct->timer_slack_ns"], "call": "semtimedop"}, {"reason": ["task_struct->timer_slack_ns"], "call": "umount"}, {"reason": ["task_struct->timer_slack_ns"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->timer_slack_ns"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->timer_slack_ns"], "call": "setsid"}, {"reason": ["task_struct->timer_slack_ns"], "call": "sigaltstack"}, {"reason": ["task_struct->timer_slack_ns"], "call": "sched_setattr"}, {"reason": ["task_struct->timer_slack_ns", "mm_struct->ioctx_table"], "call": "migrate_pages"}, {"reason": ["task_struct->timer_slack_ns"], "call": "getitimer"}, {"reason": ["task_struct->timer_slack_ns"], "call": "setpgid"}, {"reason": ["task_struct->timer_slack_ns"], "call": "getsid"}, {"reason": ["task_struct->timer_slack_ns"], "call": "prlimit64"}, {"reason": ["task_struct->timer_slack_ns"], "call": "perf_event_open"}, {"reason": ["mm_struct->ioctx_table"], "call": "shmdt"}, {"reason": ["task_struct->timer_slack_ns"], "call": "rt_sigaction"}, {"reason": ["task_struct->timer_slack_ns"], "call": "getpgid"}, {"reason": ["mm_struct->ioctx_table"], "call": "brk"}, {"reason": ["task_struct->timer_slack_ns"], "call": "getpriority"}, {"reason": ["task_struct->timer_slack_ns"], "call": "sigaction"}, {"reason": ["task_struct->timer_slack_ns"], "call": "setns"}, {"reason": ["task_struct->timer_slack_ns"], "call": "fork"}, {"reason": ["mm_struct->ioctx_table"], "call": "get_mempolicy"}, {"reason": ["kioctx->user_id"], "call": "io_submit"}, {"reason": ["task_struct->timer_slack_ns"], "call": "get_robust_list"}, {"reason": ["task_struct->timer_slack_ns"], "call": "mq_timedsend"}, {"reason": ["task_struct->timer_slack_ns"], "call": "sched_getscheduler"}, {"reason": ["task_struct->timer_slack_ns"], "call": "ptrace"}, {"reason": ["task_struct->timer_slack_ns"], "call": "sched_getattr"}, {"reason": ["task_struct->timer_slack_ns", "mm_struct->ioctx_table"], "call": "getrusage"}, {"reason": ["task_struct->timer_slack_ns"], "call": "sched_setscheduler"}, {"reason": ["task_struct->timer_slack_ns"], "call": "setitimer"}, {"reason": ["task_struct->timer_slack_ns"], "call": "ioprio_get"}, {"reason": ["task_struct->timer_slack_ns"], "call": "vfork"}, {"reason": ["kioctx_table->nr", "kioctx->user_id", "mm_struct->ioctx_table"], "call": "io_setup"}, {"reason": ["mm_struct->ioctx_table"], "call": "mremap"}, {"reason": ["kioctx_table->nr", "kioctx->user_id", "mm_struct->ioctx_table"], "call": "io_destroy"}, {"reason": ["mm_struct->ioctx_table"], "call": "mbind"}, {"reason": ["task_struct->timer_slack_ns", "mm_struct->ioctx_table"], "call": "prctl"}, {"reason": ["task_struct->timer_slack_ns", "mm_struct->ioctx_table"], "call": "move_pages"}, {"reason": ["mm_struct->ioctx_table"], "call": "modify_ldt"}, {"reason": ["task_struct->timer_slack_ns"], "call": "setpriority"}, {"reason": ["mm_struct->ioctx_table"], "call": "mincore"}, {"reason": ["task_struct->timer_slack_ns"], "call": "clone"}, {"reason": ["task_struct->timer_slack_ns"], "call": "sched_getparam"}, {"reason": ["kioctx_table->nr", "kioctx->user_id", "mm_struct->ioctx_table"], "call": "io_cancel"}], "swapoff": [{"reason": ["task_struct->mm"], "call": "keyctl"}, {"reason": ["task_struct->mm"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->mm"], "call": "msgrcv"}, {"reason": ["file->f_mapping"], "call": "eventfd2"}, {"reason": ["task_struct->mm"], "call": "kill"}, {"reason": ["task_struct->mm"], "call": "sched_getaffinity"}, {"reason": ["task_struct->mm"], "call": "sched_setparam"}, {"reason": ["file->f_mapping"], "call": "memfd_create"}, {"reason": ["task_struct->mm"], "call": "ioprio_set"}, {"reason": ["file->f_mapping"], "call": "remap_file_pages"}, {"reason": ["file->f_mapping"], "call": "dup3"}, {"reason": ["task_struct->mm"], "call": "getppid"}, {"reason": ["task_struct->mm"], "call": "mq_timedreceive"}, {"reason": ["task_struct->mm"], "call": "capget"}, {"reason": ["task_struct->mm"], "call": "sched_setaffinity"}, {"reason": ["task_struct->mm"], "call": "signal"}, {"reason": ["task_struct->mm"], "call": "semtimedop"}, {"reason": ["task_struct->mm"], "call": "umount"}, {"reason": ["task_struct->mm"], "call": "sched_rr_get_interval"}, {"reason": ["file->f_mapping"], "call": "epoll_create1"}, {"reason": ["file->f_mapping"], "call": "epoll_ctl"}, {"reason": ["file->f_mapping"], "call": "flock"}, {"reason": ["file->f_mapping"], "call": "openat"}, {"reason": ["file->f_mapping"], "call": "uselib"}, {"reason": ["task_struct->mm"], "call": "rt_sigprocmask"}, {"reason": ["file->f_mapping"], "call": "accept4"}, {"reason": ["task_struct->mm"], "call": "setsid"}, {"reason": ["task_struct->mm"], "call": "sigaltstack"}, {"reason": ["task_struct->mm"], "call": "sched_setattr"}, {"reason": ["file->f_mapping"], "call": "socketpair"}, {"reason": ["task_struct->mm"], "call": "migrate_pages"}, {"reason": ["task_struct->mm"], "call": "getitimer"}, {"reason": ["task_struct->mm"], "call": "setpgid"}, {"reason": ["task_struct->mm"], "call": "getsid"}, {"reason": ["file->f_mapping"], "call": "shmat"}, {"reason": ["file->f_mapping"], "call": "socket"}, {"reason": ["file->f_mapping"], "call": "pipe2"}, {"reason": ["task_struct->mm"], "call": "prlimit64"}, {"reason": ["task_struct->mm", "file->f_mapping"], "call": "perf_event_open"}, {"reason": ["file->f_mapping"], "call": "shmdt"}, {"reason": ["task_struct->mm"], "call": "rt_sigaction"}, {"reason": ["task_struct->mm"], "call": "getpgid"}, {"reason": ["file->f_mapping"], "call": "acct"}, {"reason": ["file->f_mapping"], "call": "open"}, {"reason": ["task_struct->mm"], "call": "getpriority"}, {"reason": ["task_struct->mm"], "call": "sigaction"}, {"reason": ["file->f_mapping"], "call": "dup"}, {"reason": ["task_struct->mm", "file->f_mapping"], "call": "setns"}, {"reason": ["task_struct->mm"], "call": "fork"}, {"reason": ["task_struct->mm"], "call": "get_robust_list"}, {"reason": ["task_struct->mm"], "call": "mq_timedsend"}, {"reason": ["task_struct->mm"], "call": "sched_getscheduler"}, {"reason": ["task_struct->mm"], "call": "ptrace"}, {"reason": ["file->f_mapping"], "call": "shmctl"}, {"reason": ["swap_info_struct->swap_map", "swap_info_struct->flags", "swap_info_struct->inuse_pages", "swap_info_struct->cluster_info", "file->f_mapping", "swap_info_struct->prio", "page->private", "swap_info_struct->pages"], "call": "swapon"}, {"reason": ["task_struct->mm"], "call": "sched_getattr"}, {"reason": ["task_struct->mm"], "call": "getrusage"}, {"reason": ["task_struct->mm"], "call": "sched_setscheduler"}, {"reason": ["task_struct->mm"], "call": "setitimer"}, {"reason": ["task_struct->mm"], "call": "ioprio_get"}, {"reason": ["task_struct->mm"], "call": "vfork"}, {"reason": ["file->f_mapping"], "call": "mmap_pgoff"}, {"reason": ["task_struct->mm"], "call": "prctl"}, {"reason": ["task_struct->mm"], "call": "move_pages"}, {"reason": ["task_struct->mm"], "call": "setpriority"}, {"reason": ["task_struct->mm"], "call": "clone"}, {"reason": ["file->f_mapping"], "call": "mq_open"}, {"reason": ["task_struct->mm"], "call": "sched_getparam"}, {"reason": ["file->f_mapping"], "call": "open_by_handle_at"}], "getgroups16": [{"reason": ["cred->group_info", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["cred->group_info"], "call": "setfsuid"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["cred->group_info"], "call": "getresuid16"}, {"reason": ["cred->group_info"], "call": "getresgid"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["cred->group_info"], "call": "setgid"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["cred->group_info"], "call": "capset"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["cred->group_info"], "call": "getresgid16"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["cred->group_info"], "call": "setfsgid"}, {"reason": ["cred->group_info"], "call": "unshare"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["cred->group_info"], "call": "setreuid"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["cred->group_info"], "call": "epoll_create1"}, {"reason": ["cred->group_info"], "call": "getresuid"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["cred->group_info"], "call": "setresgid"}, {"reason": ["cred->group_info"], "call": "setregid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["cred->group_info"], "call": "faccessat"}, {"reason": ["group_info->ngroups"], "call": "setgroups16"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->group_info"], "call": "setresuid"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["cred->group_info"], "call": "setuid"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["cred->group_info"], "call": "getgroups"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["group_info->ngroups"], "call": "setgroups"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "newlstat": [{"reason": ["stat->st_nlink", "stat->st_ino", "compat_stat->st_nlink", "compat_stat->st_ino"], "call": "newfstatat"}, {"reason": ["stat->st_nlink", "stat->st_ino", "compat_stat->st_nlink", "compat_stat->st_ino"], "call": "newstat"}, {"reason": ["kstat->size", "kstat->nlink", "kstat->ino", "kstat->rdev", "kstat->dev"], "call": "fstat"}, {"reason": ["stat->st_nlink", "kstat->nlink", "kstat->ino", "kstat->dev", "compat_stat->st_nlink", "kstat->size", "stat->st_ino", "compat_stat->st_ino", "kstat->rdev"], "call": "newfstat"}], "pkey_alloc": [{"reason": ["mm_context_t->pkey_allocation_map"], "call": "swapoff"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "remap_file_pages"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "io_getevents"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "pkey_free"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "migrate_pages"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "shmdt"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "brk"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "get_mempolicy"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "getrusage"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "io_setup"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "mremap"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "io_destroy"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "mbind"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "prctl"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "move_pages"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "modify_ldt"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "mincore"}, {"reason": ["mm_context_t->pkey_allocation_map"], "call": "io_cancel"}], "readahead": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["address_space->a_ops"], "call": "mq_unlink"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["address_space->a_ops", "file->f_mode"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["address_space->a_ops", "fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["address_space->a_ops", "file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["address_space->a_ops"], "call": "readlinkat"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["address_space->a_ops", "fd->flags"], "call": "fchown"}, {"reason": ["address_space->a_ops", "fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["address_space->a_ops", "fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags", "file->f_mode"], "call": "epoll_ctl"}, {"reason": ["fd->flags", "file->f_mode"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["address_space->a_ops", "file->f_mode"], "call": "uselib"}, {"reason": ["fd->flags", "file->f_mode"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["address_space->a_ops"], "call": "fchmodat"}, {"reason": ["address_space->a_ops", "fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["address_space->a_ops", "fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["address_space->a_ops", "file->f_mode"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["address_space->a_ops", "fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags", "file->f_mode"], "call": "perf_event_open"}, {"reason": ["address_space->a_ops"], "call": "linkat"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["address_space->a_ops"], "call": "unlink"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["address_space->a_ops", "fd->flags"], "call": "mq_getsetattr"}, {"reason": ["address_space->a_ops"], "call": "faccessat"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["address_space->a_ops", "fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["address_space->a_ops", "file->f_mode"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["address_space->a_ops"], "call": "fchownat"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["address_space->a_ops", "fd->flags"], "call": "mq_notify"}, {"reason": ["address_space->a_ops", "fd->flags"], "call": "sendfile"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["address_space->a_ops"], "call": "unlinkat"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["address_space->a_ops", "fd->flags"], "call": "sendfile64"}], "newfstatat": [{"reason": ["stat->st_nlink", "stat->st_ino", "compat_stat->st_nlink", "compat_stat->st_ino"], "call": "newlstat"}, {"reason": ["stat->st_nlink", "stat->st_ino", "compat_stat->st_nlink", "compat_stat->st_ino"], "call": "newstat"}, {"reason": ["kstat->size", "kstat->nlink", "kstat->ino", "kstat->rdev", "kstat->dev"], "call": "fstat"}, {"reason": ["stat->st_nlink", "kstat->nlink", "kstat->ino", "kstat->dev", "compat_stat->st_nlink", "kstat->size", "stat->st_ino", "compat_stat->st_ino", "kstat->rdev"], "call": "newfstat"}], "preadv": [{"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_mode"], "call": "flock"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["file->f_mode"], "call": "accept4"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}], "getdents": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigtimedwait"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["mm_segment_t->seg"], "call": "kill"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["mm_segment_t->seg"], "call": "getppid"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg", "fd->flags"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg"], "call": "capget"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["mm_segment_t->seg"], "call": "signal"}, {"reason": ["mm_segment_t->seg"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg"], "call": "umount"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["mm_segment_t->seg"], "call": "sched_rr_get_interval"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["mm_segment_t->seg"], "call": "setsid"}, {"reason": ["mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setattr"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["mm_segment_t->seg"], "call": "getsid"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["mm_segment_t->seg", "fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["mm_segment_t->seg"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["mm_segment_t->seg"], "call": "fork"}, {"reason": ["mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["mm_segment_t->seg", "fd->flags"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg"], "call": "vfork"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["mm_segment_t->seg"], "call": "prctl"}, {"reason": ["mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["mm_segment_t->seg"], "call": "clone"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getparam"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "getresgid": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "sethostname": [{"reason": ["uts_namespace->user_ns"], "call": "setns"}], "timer_delete": [{"reason": ["task_struct->signal"], "call": "keyctl"}, {"reason": ["task_struct->signal"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->signal"], "call": "msgrcv"}, {"reason": ["task_struct->signal"], "call": "kill"}, {"reason": ["k_clock->timer_del"], "call": "clock_getres"}, {"reason": ["task_struct->signal"], "call": "sched_getaffinity"}, {"reason": ["task_struct->signal"], "call": "sched_setparam"}, {"reason": ["task_struct->signal"], "call": "ioprio_set"}, {"reason": ["task_struct->signal"], "call": "getppid"}, {"reason": ["task_struct->signal"], "call": "mq_timedreceive"}, {"reason": ["task_struct->signal"], "call": "capget"}, {"reason": ["task_struct->signal"], "call": "sched_setaffinity"}, {"reason": ["task_struct->signal"], "call": "signal"}, {"reason": ["task_struct->signal"], "call": "semtimedop"}, {"reason": ["task_struct->signal"], "call": "umount"}, {"reason": ["k_clock->timer_del", "k_itimer->it_pid", "k_itimer->it_signal", "k_itimer->sigq"], "call": "timer_create"}, {"reason": ["k_clock->timer_del"], "call": "clock_gettime"}, {"reason": ["task_struct->signal"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->signal"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->signal"], "call": "setsid"}, {"reason": ["task_struct->signal"], "call": "sigaltstack"}, {"reason": ["task_struct->signal"], "call": "sched_setattr"}, {"reason": ["task_struct->signal"], "call": "migrate_pages"}, {"reason": ["task_struct->signal"], "call": "getitimer"}, {"reason": ["task_struct->signal"], "call": "setpgid"}, {"reason": ["k_clock->timer_del", "k_itimer->it_pid", "k_itimer->it_signal", "k_itimer->sigq"], "call": "timer_settime"}, {"reason": ["k_clock->timer_del", "k_itimer->it_pid", "k_itimer->it_signal", "k_itimer->sigq"], "call": "timer_gettime"}, {"reason": ["task_struct->signal"], "call": "getsid"}, {"reason": ["task_struct->signal"], "call": "prlimit64"}, {"reason": ["task_struct->signal"], "call": "perf_event_open"}, {"reason": ["task_struct->signal"], "call": "rt_sigaction"}, {"reason": ["task_struct->signal"], "call": "getpgid"}, {"reason": ["k_clock->timer_del"], "call": "clock_settime"}, {"reason": ["task_struct->signal"], "call": "getpriority"}, {"reason": ["task_struct->signal"], "call": "sigaction"}, {"reason": ["task_struct->signal"], "call": "setns"}, {"reason": ["task_struct->signal"], "call": "fork"}, {"reason": ["task_struct->signal"], "call": "get_robust_list"}, {"reason": ["task_struct->signal"], "call": "mq_timedsend"}, {"reason": ["task_struct->signal"], "call": "sched_getscheduler"}, {"reason": ["task_struct->signal"], "call": "ptrace"}, {"reason": ["task_struct->signal"], "call": "sched_getattr"}, {"reason": ["task_struct->signal"], "call": "getrusage"}, {"reason": ["task_struct->signal"], "call": "sched_setscheduler"}, {"reason": ["task_struct->signal"], "call": "setitimer"}, {"reason": ["task_struct->signal"], "call": "ioprio_get"}, {"reason": ["task_struct->signal"], "call": "vfork"}, {"reason": ["task_struct->signal"], "call": "prctl"}, {"reason": ["task_struct->signal"], "call": "move_pages"}, {"reason": ["task_struct->signal"], "call": "setpriority"}, {"reason": ["k_itimer->it_pid", "k_itimer->it_signal", "k_itimer->sigq"], "call": "timer_getoverrun"}, {"reason": ["task_struct->signal"], "call": "clone"}, {"reason": ["k_clock->timer_del"], "call": "clock_nanosleep"}, {"reason": ["task_struct->signal"], "call": "sched_getparam"}, {"reason": ["k_clock->timer_del"], "call": "clock_adjtime"}], "pwritev2": [{"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_mode"], "call": "flock"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["file->f_mode"], "call": "accept4"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}], "fchmod": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["path->dentry", "path->mnt"], "call": "pivot_root"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags", "path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["fd->flags", "path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["fd->flags", "path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["path->dentry", "path->mnt"], "call": "getcwd"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags", "path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["path->dentry", "path->mnt"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["path->dentry", "path->mnt"], "call": "mq_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "setgid": [{"reason": ["cred->user_ns", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["cred->user_ns"], "call": "setfsuid"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["cred->user_ns"], "call": "getresuid16"}, {"reason": ["cred->user_ns"], "call": "getresgid"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["cred->user_ns"], "call": "capset"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["cred->user_ns"], "call": "getresgid16"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["cred->user_ns"], "call": "setfsgid"}, {"reason": ["cred->user_ns"], "call": "unshare"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["cred->user_ns"], "call": "setreuid"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["cred->user_ns"], "call": "epoll_create1"}, {"reason": ["cred->user_ns"], "call": "getresuid"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["cred->user_ns", "cred->sgid", "cred->gid"], "call": "setresgid"}, {"reason": ["cred->user_ns", "cred->sgid", "cred->gid"], "call": "setregid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["cred->user_ns"], "call": "getgroups16"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["cred->user_ns"], "call": "faccessat"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->user_ns"], "call": "setresuid"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["cred->user_ns"], "call": "setuid"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["cred->user_ns"], "call": "getgroups"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "pivot_root": [{"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["dentry->d_inode", "dentry->d_parent", "vfsmount->mnt_flags", "vfsmount->mnt_root"], "call": "mq_unlink"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["mount->mnt_parent", "mount->mnt_ns", "vfsmount->mnt_flags", "vfsmount->mnt_root"], "call": "umount"}, {"reason": ["dentry->d_inode", "dentry->d_parent"], "call": "mkdirat"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["dentry->d_inode", "dentry->d_parent"], "call": "renameat2"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["dentry->d_inode", "vfsmount->mnt_root", "dentry->d_parent", "path->dentry", "path->mnt", "mount->mnt_parent", "mount->mnt_ns", "vfsmount->mnt_flags"], "call": "getcwd"}, {"reason": ["dentry->d_inode", "dentry->d_parent"], "call": "ftruncate"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["dentry->d_inode", "dentry->d_parent"], "call": "mknodat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["dentry->d_inode", "dentry->d_parent"], "call": "symlinkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["dentry->d_inode", "dentry->d_parent"], "call": "linkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["vfsmount->mnt_flags", "path->dentry", "path->mnt", "vfsmount->mnt_root"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["dentry->d_inode", "dentry->d_parent"], "call": "unlink"}, {"reason": ["dentry->d_inode", "dentry->d_parent"], "call": "rmdir"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "nsproxy->mnt_ns", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["dentry->d_inode", "vfsmount->mnt_root", "dentry->d_parent", "path->dentry", "path->mnt", "vfsmount->mnt_flags"], "call": "mq_open"}, {"reason": ["dentry->d_inode", "dentry->d_parent"], "call": "unlinkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "getuid16": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "epoll_wait": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigtimedwait"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["file->f_op"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["mm_segment_t->seg"], "call": "kill"}, {"reason": ["file->f_op"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_op"], "call": "memfd_create"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["file->f_op"], "call": "remap_file_pages"}, {"reason": ["file->f_op"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["mm_segment_t->seg"], "call": "getppid"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg", "fd->flags"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg"], "call": "capget"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["mm_segment_t->seg"], "call": "signal"}, {"reason": ["mm_segment_t->seg"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg"], "call": "umount"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["mm_segment_t->seg"], "call": "sched_rr_get_interval"}, {"reason": ["file->f_op"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["file->f_op", "fd->flags"], "call": "epoll_ctl"}, {"reason": ["file->f_op", "fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_op"], "call": "openat"}, {"reason": ["file->f_op"], "call": "uselib"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["file->f_op", "fd->flags"], "call": "accept4"}, {"reason": ["mm_segment_t->seg"], "call": "setsid"}, {"reason": ["mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setattr"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_op"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["mm_segment_t->seg"], "call": "getsid"}, {"reason": ["file->f_op"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["file->f_op"], "call": "socket"}, {"reason": ["file->f_op"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["file->f_op", "mm_segment_t->seg", "fd->flags"], "call": "perf_event_open"}, {"reason": ["file->f_op"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_op"], "call": "acct"}, {"reason": ["file->f_op"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_op"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_op", "mm_segment_t->seg"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["mm_segment_t->seg"], "call": "fork"}, {"reason": ["mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["mm_segment_t->seg", "fd->flags"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["file->f_op"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["file->f_op"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg"], "call": "vfork"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_op"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["mm_segment_t->seg"], "call": "prctl"}, {"reason": ["mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["mm_segment_t->seg"], "call": "clone"}, {"reason": ["file->f_op"], "call": "mq_open"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getparam"}, {"reason": ["file->f_op"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "ioprio_set": [{"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_getparam"}], "capset": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "delete_module": [{"reason": ["module->exit", "module->init", "module->state"], "call": "init_module"}, {"reason": ["module->exit", "module->init", "module->state"], "call": "finit_module"}], "remap_file_pages": [{"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_file", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "shmdt"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_file", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "brk"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_file", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "get_mempolicy"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_file", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "munlockall"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_file", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "pkey_mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_file", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "madvise"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_file", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_file", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "mremap"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_file", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "prctl"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_file", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "munlock"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_file", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "mincore"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_file", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "mlockall"}], "dup3": [{"reason": ["files_struct->resize_in_progress", "files_struct->fdt", "fdtable->max_fds"], "call": "unshare"}, {"reason": ["fdtable->max_fds"], "call": "select"}, {"reason": ["files_struct->resize_in_progress", "files_struct->fdt", "fdtable->max_fds"], "call": "dup2"}], "readlinkat": [{"reason": ["path->dentry"], "call": "eventfd2"}, {"reason": ["path->dentry"], "call": "swapoff"}, {"reason": ["path->dentry"], "call": "pivot_root"}, {"reason": ["path->dentry"], "call": "memfd_create"}, {"reason": ["path->dentry"], "call": "remap_file_pages"}, {"reason": ["path->dentry"], "call": "dup3"}, {"reason": ["path->dentry"], "call": "unshare"}, {"reason": ["path->dentry"], "call": "epoll_create1"}, {"reason": ["path->dentry"], "call": "epoll_ctl"}, {"reason": ["path->dentry"], "call": "flock"}, {"reason": ["path->dentry"], "call": "openat"}, {"reason": ["path->dentry"], "call": "lookup_dcookie"}, {"reason": ["path->dentry"], "call": "uselib"}, {"reason": ["path->dentry"], "call": "accept4"}, {"reason": ["path->dentry"], "call": "socketpair"}, {"reason": ["path->dentry"], "call": "getcwd"}, {"reason": ["path->dentry"], "call": "shmat"}, {"reason": ["path->dentry"], "call": "socket"}, {"reason": ["path->dentry"], "call": "pipe2"}, {"reason": ["path->dentry"], "call": "perf_event_open"}, {"reason": ["path->dentry"], "call": "shmdt"}, {"reason": ["path->dentry"], "call": "quotactl"}, {"reason": ["path->dentry"], "call": "acct"}, {"reason": ["path->dentry"], "call": "open"}, {"reason": ["path->dentry"], "call": "dup"}, {"reason": ["path->dentry"], "call": "setns"}, {"reason": ["path->dentry"], "call": "shmctl"}, {"reason": ["path->dentry"], "call": "swapon"}, {"reason": ["path->dentry"], "call": "mmap_pgoff"}, {"reason": ["path->dentry"], "call": "mq_open"}, {"reason": ["path->dentry"], "call": "open_by_handle_at"}], "read": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "getppid": [{"reason": ["task_struct->real_parent"], "call": "keyctl"}, {"reason": ["task_struct->real_parent"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->real_parent"], "call": "msgrcv"}, {"reason": ["task_struct->real_parent"], "call": "kill"}, {"reason": ["task_struct->real_parent"], "call": "sched_getaffinity"}, {"reason": ["task_struct->real_parent"], "call": "sched_setparam"}, {"reason": ["task_struct->real_parent"], "call": "ioprio_set"}, {"reason": ["task_struct->real_parent"], "call": "mq_timedreceive"}, {"reason": ["task_struct->real_parent"], "call": "capget"}, {"reason": ["task_struct->real_parent"], "call": "sched_setaffinity"}, {"reason": ["task_struct->real_parent"], "call": "signal"}, {"reason": ["task_struct->real_parent"], "call": "semtimedop"}, {"reason": ["task_struct->real_parent"], "call": "umount"}, {"reason": ["task_struct->real_parent"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->real_parent"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->real_parent"], "call": "setsid"}, {"reason": ["task_struct->real_parent"], "call": "sigaltstack"}, {"reason": ["task_struct->real_parent"], "call": "sched_setattr"}, {"reason": ["task_struct->real_parent"], "call": "migrate_pages"}, {"reason": ["task_struct->real_parent"], "call": "getitimer"}, {"reason": ["task_struct->real_parent"], "call": "setpgid"}, {"reason": ["task_struct->real_parent"], "call": "getsid"}, {"reason": ["task_struct->real_parent"], "call": "prlimit64"}, {"reason": ["task_struct->real_parent"], "call": "perf_event_open"}, {"reason": ["task_struct->real_parent"], "call": "rt_sigaction"}, {"reason": ["task_struct->real_parent"], "call": "getpgid"}, {"reason": ["task_struct->real_parent"], "call": "getpriority"}, {"reason": ["task_struct->real_parent"], "call": "sigaction"}, {"reason": ["task_struct->real_parent"], "call": "setns"}, {"reason": ["task_struct->real_parent"], "call": "fork"}, {"reason": ["task_struct->real_parent"], "call": "get_robust_list"}, {"reason": ["task_struct->real_parent"], "call": "mq_timedsend"}, {"reason": ["task_struct->real_parent"], "call": "sched_getscheduler"}, {"reason": ["task_struct->real_parent"], "call": "ptrace"}, {"reason": ["task_struct->real_parent"], "call": "sched_getattr"}, {"reason": ["task_struct->real_parent"], "call": "getrusage"}, {"reason": ["task_struct->real_parent"], "call": "sched_setscheduler"}, {"reason": ["task_struct->real_parent"], "call": "setitimer"}, {"reason": ["task_struct->real_parent"], "call": "ioprio_get"}, {"reason": ["task_struct->real_parent"], "call": "vfork"}, {"reason": ["task_struct->real_parent"], "call": "prctl"}, {"reason": ["task_struct->real_parent"], "call": "move_pages"}, {"reason": ["task_struct->real_parent"], "call": "setpriority"}, {"reason": ["task_struct->real_parent"], "call": "clone"}, {"reason": ["task_struct->real_parent"], "call": "sched_getparam"}], "fchown": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["path->dentry"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["path->dentry"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["path->dentry"], "call": "pivot_root"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["path->dentry"], "call": "memfd_create"}, {"reason": ["path->dentry"], "call": "remap_file_pages"}, {"reason": ["path->dentry"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["path->dentry"], "call": "unshare"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["path->dentry"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags", "path->dentry"], "call": "epoll_ctl"}, {"reason": ["fd->flags", "path->dentry"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["path->dentry"], "call": "openat"}, {"reason": ["path->dentry"], "call": "lookup_dcookie"}, {"reason": ["path->dentry"], "call": "uselib"}, {"reason": ["fd->flags", "path->dentry"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["path->dentry"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["path->dentry"], "call": "getcwd"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["path->dentry"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["path->dentry"], "call": "socket"}, {"reason": ["path->dentry"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags", "path->dentry"], "call": "perf_event_open"}, {"reason": ["path->dentry"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["path->dentry"], "call": "quotactl"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["path->dentry"], "call": "acct"}, {"reason": ["path->dentry"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["path->dentry"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["path->dentry"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["path->dentry"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["path->dentry"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["path->dentry"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["path->dentry"], "call": "mq_open"}, {"reason": ["path->dentry"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "stat": [{"reason": ["__old_kernel_stat->st_nlink", "__old_kernel_stat->st_ino"], "call": "lstat"}, {"reason": ["kstat->ino", "kstat->nlink", "__old_kernel_stat->st_nlink", "kstat->dev", "__old_kernel_stat->st_ino", "kstat->rdev"], "call": "fstat"}, {"reason": ["kstat->ino", "kstat->nlink", "kstat->rdev", "kstat->dev"], "call": "newfstat"}], "ioperm": [{"reason": ["thread_struct->io_bitmap_ptr"], "call": "keyctl"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "rt_sigtimedwait"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "msgrcv"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "kill"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "sched_getaffinity"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "sched_setparam"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "ioprio_set"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "getppid"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "mq_timedreceive"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "capget"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "sched_setaffinity"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "signal"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "semtimedop"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "umount"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "sched_rr_get_interval"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "rt_sigprocmask"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "setsid"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "sigaltstack"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "sched_setattr"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "migrate_pages"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "getitimer"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "setpgid"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "getsid"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "prlimit64"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "perf_event_open"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "rt_sigaction"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "getpgid"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "getpriority"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "sigaction"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "setns"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "fork"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "get_robust_list"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "mq_timedsend"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "sched_getscheduler"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "ptrace"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "sched_getattr"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "getrusage"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "sched_setscheduler"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "setitimer"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "ioprio_get"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "vfork"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "prctl"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "move_pages"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "setpriority"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "clone"}, {"reason": ["thread_struct->io_bitmap_ptr"], "call": "sched_getparam"}], "mq_timedreceive": [{"reason": ["msg_msg->m_ts"], "call": "msgrcv"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "dup3"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "flock"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "openat"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "uselib"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "accept4"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "shmat"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "socket"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "acct"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "open"}, {"reason": ["mqueue_inode_info->node_cache", "mq_attr->mq_curmsgs", "file->f_flags", "mq_attr->mq_msgsize"], "call": "mq_getsetattr"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "dup"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "setns"}, {"reason": ["mqueue_inode_info->node_cache", "mq_attr->mq_curmsgs", "msg_msg->m_ts", "mq_attr->mq_msgsize"], "call": "mq_timedsend"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "swapon"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["msg_msg->m_ts"], "call": "msgsnd"}, {"reason": ["mqueue_inode_info->node_cache", "mq_attr->mq_curmsgs", "mq_attr->mq_msgsize"], "call": "mq_notify"}, {"reason": ["file->f_op", "mq_attr->mq_curmsgs", "file->f_mode", "file->f_flags", "mq_attr->mq_msgsize"], "call": "mq_open"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "open_by_handle_at"}], "utime": [{"reason": ["timespec->tv_nsec"], "call": "rt_sigtimedwait"}, {"reason": ["timespec->tv_nsec"], "call": "mq_unlink"}, {"reason": ["timespec->tv_nsec"], "call": "swapoff"}, {"reason": ["timespec->tv_nsec"], "call": "fchmod"}, {"reason": ["timespec->tv_nsec"], "call": "memfd_create"}, {"reason": ["timespec->tv_nsec"], "call": "readlinkat"}, {"reason": ["timespec->tv_nsec"], "call": "io_getevents"}, {"reason": ["timespec->tv_nsec"], "call": "fchown"}, {"reason": ["timespec->tv_nsec"], "call": "mq_timedreceive"}, {"reason": ["timespec->tv_nsec"], "call": "semtimedop"}, {"reason": ["timespec->tv_nsec"], "call": "settimeofday"}, {"reason": ["timespec->tv_nsec"], "call": "sched_rr_get_interval"}, {"reason": ["timespec->tv_nsec"], "call": "timerfd_gettime"}, {"reason": ["timespec->tv_nsec"], "call": "pselect6"}, {"reason": ["timespec->tv_nsec"], "call": "uselib"}, {"reason": ["timespec->tv_nsec"], "call": "fchmodat"}, {"reason": ["timespec->tv_nsec"], "call": "inotify_add_watch"}, {"reason": ["timespec->tv_nsec"], "call": "timer_settime"}, {"reason": ["timespec->tv_nsec"], "call": "ftruncate"}, {"reason": ["timespec->tv_nsec"], "call": "timer_gettime"}, {"reason": ["timespec->tv_nsec"], "call": "ioctl"}, {"reason": ["timespec->tv_nsec"], "call": "linkat"}, {"reason": ["timespec->tv_nsec"], "call": "stime"}, {"reason": ["timespec->tv_nsec"], "call": "futimesat"}, {"reason": ["timespec->tv_nsec"], "call": "poll"}, {"reason": ["timespec->tv_nsec"], "call": "select"}, {"reason": ["timespec->tv_nsec"], "call": "unlink"}, {"reason": ["timespec->tv_nsec"], "call": "nanosleep"}, {"reason": ["timespec->tv_nsec"], "call": "mq_getsetattr"}, {"reason": ["timespec->tv_nsec"], "call": "faccessat"}, {"reason": ["timespec->tv_nsec"], "call": "mq_timedsend"}, {"reason": ["timespec->tv_nsec"], "call": "swapon"}, {"reason": ["timespec->tv_nsec"], "call": "epoll_wait"}, {"reason": ["timespec->tv_nsec"], "call": "fchownat"}, {"reason": ["timespec->tv_nsec"], "call": "fstat"}, {"reason": ["timespec->tv_nsec"], "call": "timerfd_settime"}, {"reason": ["timespec->tv_nsec"], "call": "mq_notify"}, {"reason": ["timespec->tv_nsec"], "call": "sendfile"}, {"reason": ["timespec->tv_nsec"], "call": "newfstat"}, {"reason": ["timespec->tv_nsec"], "call": "clock_nanosleep"}, {"reason": ["timespec->tv_nsec"], "call": "unlinkat"}, {"reason": ["timespec->tv_nsec"], "call": "futex"}, {"reason": ["timespec->tv_nsec"], "call": "recvmmsg"}, {"reason": ["timespec->tv_nsec"], "call": "sendfile64"}, {"reason": ["timespec->tv_nsec"], "call": "ppoll"}], "sched_setaffinity": [{"reason": ["cred->user_ns", "task_struct->real_cred", "task_struct->flags"], "call": "keyctl"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "rt_sigtimedwait"}, {"reason": ["cred->user_ns"], "call": "setfsuid"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "msgrcv"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "kill"}, {"reason": ["cred->user_ns"], "call": "getresuid16"}, {"reason": ["cred->user_ns"], "call": "getresgid"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "sched_getaffinity"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "sched_setparam"}, {"reason": ["cred->user_ns"], "call": "setgid"}, {"reason": ["cred->user_ns", "task_struct->real_cred", "task_struct->flags"], "call": "ioprio_set"}, {"reason": ["cred->user_ns"], "call": "capset"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "getppid"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "mq_timedreceive"}, {"reason": ["cred->user_ns"], "call": "getresgid16"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "capget"}, {"reason": ["cred->user_ns"], "call": "setfsgid"}, {"reason": ["cred->user_ns"], "call": "unshare"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "signal"}, {"reason": ["cred->user_ns", "task_struct->flags"], "call": "setreuid"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "semtimedop"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "umount"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "sched_rr_get_interval"}, {"reason": ["cred->user_ns"], "call": "epoll_create1"}, {"reason": ["cred->user_ns"], "call": "getresuid"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "setsid"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "sigaltstack"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "sched_setattr"}, {"reason": ["cred->user_ns", "task_struct->real_cred", "task_struct->flags"], "call": "migrate_pages"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "getitimer"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "setpgid"}, {"reason": ["cred->user_ns"], "call": "setresgid"}, {"reason": ["cred->user_ns"], "call": "setregid"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "getsid"}, {"reason": ["cred->user_ns", "task_struct->real_cred", "task_struct->flags"], "call": "prlimit64"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "perf_event_open"}, {"reason": ["cred->user_ns"], "call": "getgroups16"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "rt_sigaction"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "getpgid"}, {"reason": ["cred->user_ns", "task_struct->real_cred", "task_struct->flags"], "call": "getpriority"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "sigaction"}, {"reason": ["cred->user_ns"], "call": "faccessat"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "setns"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "fork"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "get_robust_list"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "mq_timedsend"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "sched_getscheduler"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "ptrace"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "sched_getattr"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "getrusage"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "sched_setscheduler"}, {"reason": ["cred->user_ns", "task_struct->flags"], "call": "setresuid"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "setitimer"}, {"reason": ["cred->user_ns", "task_struct->real_cred", "task_struct->flags"], "call": "ioprio_get"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "vfork"}, {"reason": ["cred->user_ns", "task_struct->flags"], "call": "setuid"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "prctl"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "move_pages"}, {"reason": ["cred->user_ns"], "call": "getgroups"}, {"reason": ["cred->user_ns", "task_struct->real_cred", "task_struct->flags"], "call": "setpriority"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "clone"}, {"reason": ["task_struct->real_cred", "task_struct->flags"], "call": "sched_getparam"}], "ustat": [{"reason": ["super_block->s_root"], "call": "syncfs"}, {"reason": ["super_block->s_root"], "call": "umount"}, {"reason": ["super_block->s_root"], "call": "quotactl"}, {"reason": ["super_block->s_root"], "call": "swapon"}], "setfsgid": [{"reason": ["cred->user_ns", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["cred->user_ns"], "call": "setfsuid"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["cred->user_ns"], "call": "getresuid16"}, {"reason": ["cred->user_ns"], "call": "getresgid"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["cred->user_ns", "cred->sgid", "cred->gid", "cred->egid", "cred->fsgid"], "call": "setgid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["cred->user_ns"], "call": "capset"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["cred->user_ns"], "call": "getresgid16"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["cred->user_ns"], "call": "unshare"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["cred->user_ns"], "call": "setreuid"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["cred->user_ns"], "call": "epoll_create1"}, {"reason": ["cred->user_ns"], "call": "getresuid"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["cred->user_ns", "cred->sgid", "cred->gid", "cred->egid", "cred->fsgid"], "call": "setresgid"}, {"reason": ["cred->user_ns", "cred->sgid", "cred->gid", "cred->egid", "cred->fsgid"], "call": "setregid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["cred->user_ns"], "call": "getgroups16"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["cred->user_ns", "cred->fsgid"], "call": "faccessat"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->user_ns"], "call": "setresuid"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["cred->user_ns"], "call": "setuid"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["cred->user_ns"], "call": "getgroups"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "bpf": [{"reason": ["mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigtimedwait"}, {"reason": ["mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["file->f_op", "file->private_data"], "call": "eventfd2"}, {"reason": ["mm_segment_t->seg"], "call": "kill"}, {"reason": ["file->f_op", "file->private_data"], "call": "swapoff"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["file->f_op", "file->private_data"], "call": "memfd_create"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["file->f_op", "file->private_data"], "call": "remap_file_pages"}, {"reason": ["file->f_op", "file->private_data"], "call": "dup3"}, {"reason": ["mm_segment_t->seg"], "call": "getppid"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg"], "call": "capget"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "signal"}, {"reason": ["mm_segment_t->seg"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg"], "call": "umount"}, {"reason": ["mm_segment_t->seg"], "call": "sched_rr_get_interval"}, {"reason": ["file->f_op", "file->private_data"], "call": "epoll_create1"}, {"reason": ["file->f_op", "file->private_data"], "call": "epoll_ctl"}, {"reason": ["file->f_op", "file->private_data"], "call": "flock"}, {"reason": ["file->f_op", "file->private_data"], "call": "openat"}, {"reason": ["file->f_op", "file->private_data"], "call": "uselib"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["file->f_op", "file->private_data"], "call": "accept4"}, {"reason": ["mm_segment_t->seg"], "call": "setsid"}, {"reason": ["mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setattr"}, {"reason": ["file->f_op", "file->private_data"], "call": "socketpair"}, {"reason": ["mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["mm_segment_t->seg"], "call": "getsid"}, {"reason": ["file->f_op", "file->private_data"], "call": "shmat"}, {"reason": ["file->f_op", "file->private_data"], "call": "socket"}, {"reason": ["file->f_op", "file->private_data"], "call": "pipe2"}, {"reason": ["mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["file->f_op", "mm_segment_t->seg", "bpf_prog->aux", "file->private_data"], "call": "perf_event_open"}, {"reason": ["file->f_op", "file->private_data"], "call": "shmdt"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["file->f_op", "file->private_data"], "call": "acct"}, {"reason": ["file->f_op", "file->private_data"], "call": "open"}, {"reason": ["mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["file->f_op", "file->private_data"], "call": "dup"}, {"reason": ["file->f_op", "mm_segment_t->seg", "file->private_data"], "call": "setns"}, {"reason": ["mm_segment_t->seg"], "call": "fork"}, {"reason": ["mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["mm_segment_t->seg"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["file->f_op", "file->private_data"], "call": "shmctl"}, {"reason": ["file->f_op", "file->private_data"], "call": "swapon"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg"], "call": "vfork"}, {"reason": ["file->f_op", "file->private_data"], "call": "mmap_pgoff"}, {"reason": ["mm_segment_t->seg"], "call": "prctl"}, {"reason": ["mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["mm_segment_t->seg"], "call": "clone"}, {"reason": ["file->f_op", "file->private_data"], "call": "mq_open"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getparam"}, {"reason": ["file->f_op", "file->private_data"], "call": "open_by_handle_at"}], "newstat": [{"reason": ["stat->st_nlink", "stat->st_ino", "compat_stat->st_nlink", "compat_stat->st_ino"], "call": "newlstat"}, {"reason": ["stat->st_nlink", "stat->st_ino", "compat_stat->st_nlink", "compat_stat->st_ino"], "call": "newfstatat"}, {"reason": ["kstat->size", "kstat->nlink", "kstat->ino", "kstat->rdev", "kstat->dev"], "call": "fstat"}, {"reason": ["stat->st_nlink", "kstat->nlink", "kstat->ino", "kstat->dev", "compat_stat->st_nlink", "kstat->size", "stat->st_ino", "compat_stat->st_ino", "kstat->rdev"], "call": "newfstat"}], "setreuid": [{"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setfsuid"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getresuid16"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getresgid"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setgid"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["cred->user", "cred->user_ns"], "call": "capset"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getresgid16"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setfsgid"}, {"reason": ["cred->user", "cred->user_ns"], "call": "unshare"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["cred->user", "cred->user_ns"], "call": "epoll_create1"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getresuid"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setresgid"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setregid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getgroups16"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["cred->user", "cred->user_ns"], "call": "faccessat"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->uid", "cred->user", "cred->suid", "cred->euid", "cred->user_ns"], "call": "setresuid"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["cred->uid", "cred->user", "cred->suid", "cred->euid", "cred->user_ns"], "call": "setuid"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getgroups"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "semtimedop": [{"reason": ["list_head->prev"], "call": "syncfs"}, {"reason": ["list_head->prev"], "call": "keyctl"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "rt_sigtimedwait"}, {"reason": ["list_head->prev"], "call": "vmsplice"}, {"reason": ["kern_ipc_perm->deleted", "list_head->prev"], "call": "msgrcv"}, {"reason": ["list_head->prev"], "call": "eventfd2"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_unlink"}, {"reason": ["list_head->prev"], "call": "kill"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "swapoff"}, {"reason": ["list_head->prev"], "call": "readahead"}, {"reason": ["list_head->prev"], "call": "timer_delete"}, {"reason": ["list_head->prev"], "call": "sched_getaffinity"}, {"reason": ["list_head->prev"], "call": "sched_setparam"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmod"}, {"reason": ["list_head->prev"], "call": "setgid"}, {"reason": ["list_head->prev"], "call": "pivot_root"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "memfd_create"}, {"reason": ["list_head->prev"], "call": "ioprio_set"}, {"reason": ["list_head->prev"], "call": "delete_module"}, {"reason": ["list_head->prev"], "call": "remap_file_pages"}, {"reason": ["list_head->prev"], "call": "dup3"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "readlinkat"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "io_getevents"}, {"reason": ["list_head->prev"], "call": "getppid"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "fchown"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedreceive"}, {"reason": ["list_head->prev"], "call": "capget"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "utime"}, {"reason": ["list_head->prev"], "call": "sched_setaffinity"}, {"reason": ["list_head->prev"], "call": "ustat"}, {"reason": ["list_head->prev"], "call": "bpf"}, {"reason": ["list_head->prev"], "call": "unshare"}, {"reason": ["list_head->prev"], "call": "signal"}, {"reason": ["list_head->prev"], "call": "setreuid"}, {"reason": ["list_head->prev"], "call": "umount"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "settimeofday"}, {"reason": ["list_head->prev"], "call": "timer_create"}, {"reason": ["list_head->prev"], "call": "mkdirat"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "sched_rr_get_interval"}, {"reason": ["list_head->prev"], "call": "epoll_create1"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_gettime"}, {"reason": ["list_head->prev"], "call": "tee"}, {"reason": ["kern_ipc_perm->deleted", "sem_array->sem_nsems", "sem_array->use_global_lock", "sem_array->complex_count", "sem_undo->semid", "list_head->prev"], "call": "semctl"}, {"reason": ["list_head->prev"], "call": "sync_file_range"}, {"reason": ["list_head->prev"], "call": "epoll_ctl"}, {"reason": ["list_head->prev"], "call": "flock"}, {"reason": ["list_head->prev"], "call": "openat"}, {"reason": ["list_head->prev"], "call": "lookup_dcookie"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "pselect6"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "uselib"}, {"reason": ["list_head->prev"], "call": "renameat2"}, {"reason": ["list_head->prev"], "call": "rt_sigprocmask"}, {"reason": ["list_head->prev"], "call": "accept4"}, {"reason": ["kern_ipc_perm->deleted", "list_head->prev"], "call": "msgctl"}, {"reason": ["list_head->prev"], "call": "reboot"}, {"reason": ["list_head->prev"], "call": "setsid"}, {"reason": ["list_head->prev"], "call": "set_trip_temp"}, {"reason": ["list_head->prev"], "call": "sigaltstack"}, {"reason": ["list_head->prev"], "call": "sched_setattr"}, {"reason": ["list_head->prev"], "call": "inotify_rm_watch"}, {"reason": ["list_head->prev"], "call": "socketpair"}, {"reason": ["list_head->prev"], "call": "migrate_pages"}, {"reason": ["list_head->prev"], "call": "getitimer"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmodat"}, {"reason": ["list_head->prev"], "call": "setpgid"}, {"reason": ["list_head->prev"], "call": "init_module"}, {"reason": ["list_head->prev"], "call": "setresgid"}, {"reason": ["list_head->prev"], "call": "getcwd"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "inotify_add_watch"}, {"reason": ["list_head->prev"], "call": "get_trip_temp"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_settime"}, {"reason": ["list_head->prev"], "call": "setregid"}, {"reason": ["list_head->prev"], "call": "splice"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "ftruncate"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_gettime"}, {"reason": ["list_head->prev"], "call": "getsid"}, {"reason": ["kern_ipc_perm->deleted", "list_head->prev"], "call": "shmat"}, {"reason": ["list_head->prev"], "call": "mknodat"}, {"reason": ["list_head->prev"], "call": "socket"}, {"reason": ["list_head->prev"], "call": "symlinkat"}, {"reason": ["list_head->prev"], "call": "pipe2"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "ioctl"}, {"reason": ["list_head->prev"], "call": "prlimit64"}, {"reason": ["list_head->prev"], "call": "perf_event_open"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "linkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "stime"}, {"reason": ["list_head->prev"], "call": "getgroups16"}, {"reason": ["list_head->prev"], "call": "shmdt"}, {"reason": ["list_head->prev"], "call": "quotactl"}, {"reason": ["list_head->prev"], "call": "rt_sigaction"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futimesat"}, {"reason": ["list_head->prev"], "call": "request_key"}, {"reason": ["list_head->prev"], "call": "getpgid"}, {"reason": ["list_head->prev"], "call": "brk"}, {"reason": ["list_head->prev"], "call": "acct"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "poll"}, {"reason": ["list_head->prev"], "call": "open"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "select"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "unlink"}, {"reason": ["list_head->prev"], "call": "exit_group"}, {"reason": ["list_head->prev"], "call": "getpriority"}, {"reason": ["list_head->prev"], "call": "sigaction"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "nanosleep"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_getsetattr"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "faccessat"}, {"reason": ["list_head->prev"], "call": "rmdir"}, {"reason": ["list_head->prev"], "call": "dup"}, {"reason": ["list_head->prev"], "call": "setgroups16"}, {"reason": ["list_head->prev"], "call": "setns"}, {"reason": ["list_head->prev"], "call": "fork"}, {"reason": ["list_head->prev"], "call": "get_mempolicy"}, {"reason": ["list_head->prev"], "call": "io_submit"}, {"reason": ["list_head->prev"], "call": "get_robust_list"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedsend"}, {"reason": ["list_head->prev"], "call": "sched_yield"}, {"reason": ["list_head->prev"], "call": "sched_getscheduler"}, {"reason": ["list_head->prev"], "call": "ptrace"}, {"reason": ["kern_ipc_perm->deleted", "list_head->prev"], "call": "shmctl"}, {"reason": ["list_head->prev"], "call": "munlockall"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "swapon"}, {"reason": ["list_head->prev"], "call": "pkey_mprotect"}, {"reason": ["list_head->prev"], "call": "madvise"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "epoll_wait"}, {"reason": ["list_head->prev"], "call": "sched_getattr"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "fchownat"}, {"reason": ["list_head->prev"], "call": "getrusage"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fstat"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_settime"}, {"reason": ["list_head->prev"], "call": "sched_setscheduler"}, {"reason": ["list_head->prev"], "call": "setresuid"}, {"reason": ["list_head->prev"], "call": "setitimer"}, {"reason": ["list_head->prev"], "call": "ioprio_get"}, {"reason": ["list_head->prev"], "call": "vfork"}, {"reason": ["list_head->prev"], "call": "setuid"}, {"reason": ["list_head->prev"], "call": "io_setup"}, {"reason": ["list_head->prev"], "call": "mprotect"}, {"reason": ["list_head->prev"], "call": "mmap_pgoff"}, {"reason": ["list_head->prev"], "call": "mremap"}, {"reason": ["list_head->prev"], "call": "io_destroy"}, {"reason": ["list_head->prev"], "call": "mbind"}, {"reason": ["list_head->prev"], "call": "prctl"}, {"reason": ["list_head->prev"], "call": "move_pages"}, {"reason": ["list_head->prev"], "call": "timerfd_create"}, {"reason": ["list_head->prev"], "call": "modify_ldt"}, {"reason": ["list_head->prev"], "call": "getgroups"}, {"reason": ["list_head->prev"], "call": "dup2"}, {"reason": ["list_head->prev"], "call": "get_curr_temp"}, {"reason": ["kern_ipc_perm->deleted", "list_head->prev"], "call": "msgsnd"}, {"reason": ["list_head->prev"], "call": "munlock"}, {"reason": ["list_head->prev"], "call": "setpriority"}, {"reason": ["list_head->prev"], "call": "inotify_init1"}, {"reason": ["list_head->prev"], "call": "mincore"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_notify"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile"}, {"reason": ["list_head->prev"], "call": "timer_getoverrun"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "newfstat"}, {"reason": ["list_head->prev"], "call": "kexec_load"}, {"reason": ["list_head->prev"], "call": "clone"}, {"reason": ["list_head->prev"], "call": "mq_open"}, {"reason": ["list_head->prev"], "call": "setgroups"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "clock_nanosleep"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "unlinkat"}, {"reason": ["list_head->prev"], "call": "sched_getparam"}, {"reason": ["list_head->prev"], "call": "io_cancel"}, {"reason": ["list_head->prev"], "call": "open_by_handle_at"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futex"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "recvmmsg"}, {"reason": ["list_head->prev"], "call": "finit_module"}, {"reason": ["list_head->prev", "timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile64"}, {"reason": ["list_head->prev"], "call": "mlockall"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ppoll"}], "umount": [{"reason": ["super_block->s_flags"], "call": "syncfs"}, {"reason": ["task_struct->flags"], "call": "keyctl"}, {"reason": ["task_struct->flags"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->flags"], "call": "msgrcv"}, {"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["vfsmount->mnt_flags", "vfsmount->mnt_root"], "call": "mq_unlink"}, {"reason": ["task_struct->flags"], "call": "kill"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["task_struct->flags"], "call": "sched_getaffinity"}, {"reason": ["task_struct->flags"], "call": "sched_setparam"}, {"reason": ["mount->mnt_ns", "vfsmount->mnt_flags", "path->dentry", "path->mnt", "vfsmount->mnt_root"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["task_struct->flags"], "call": "ioprio_set"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["task_struct->flags"], "call": "getppid"}, {"reason": ["task_struct->flags"], "call": "mq_timedreceive"}, {"reason": ["task_struct->flags"], "call": "capget"}, {"reason": ["task_struct->flags"], "call": "sched_setaffinity"}, {"reason": ["super_block->s_flags"], "call": "ustat"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["task_struct->flags"], "call": "signal"}, {"reason": ["task_struct->flags"], "call": "setreuid"}, {"reason": ["task_struct->flags"], "call": "semtimedop"}, {"reason": ["task_struct->flags"], "call": "sched_rr_get_interval"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["task_struct->flags"], "call": "rt_sigprocmask"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["task_struct->flags"], "call": "setsid"}, {"reason": ["task_struct->flags"], "call": "sigaltstack"}, {"reason": ["task_struct->flags"], "call": "sched_setattr"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["task_struct->flags"], "call": "migrate_pages"}, {"reason": ["task_struct->flags"], "call": "getitimer"}, {"reason": ["task_struct->flags"], "call": "setpgid"}, {"reason": ["mount->mnt_ns", "vfsmount->mnt_flags", "path->dentry", "path->mnt", "vfsmount->mnt_root"], "call": "getcwd"}, {"reason": ["task_struct->flags"], "call": "getsid"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["task_struct->flags"], "call": "prlimit64"}, {"reason": ["path->dentry", "task_struct->flags", "path->mnt"], "call": "perf_event_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["path->dentry", "path->mnt", "super_block->s_flags"], "call": "quotactl"}, {"reason": ["task_struct->flags"], "call": "rt_sigaction"}, {"reason": ["task_struct->flags"], "call": "getpgid"}, {"reason": ["vfsmount->mnt_flags", "path->dentry", "path->mnt", "vfsmount->mnt_root"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["task_struct->flags"], "call": "getpriority"}, {"reason": ["task_struct->flags"], "call": "sigaction"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "nsproxy->mnt_ns", "task_struct->flags", "path->mnt"], "call": "setns"}, {"reason": ["task_struct->flags"], "call": "fork"}, {"reason": ["task_struct->flags"], "call": "get_robust_list"}, {"reason": ["task_struct->flags"], "call": "mq_timedsend"}, {"reason": ["task_struct->flags"], "call": "sched_getscheduler"}, {"reason": ["task_struct->flags"], "call": "ptrace"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["path->dentry", "path->mnt", "super_block->s_flags"], "call": "swapon"}, {"reason": ["task_struct->flags"], "call": "sched_getattr"}, {"reason": ["task_struct->flags"], "call": "getrusage"}, {"reason": ["task_struct->flags"], "call": "sched_setscheduler"}, {"reason": ["task_struct->flags"], "call": "setresuid"}, {"reason": ["task_struct->flags"], "call": "setitimer"}, {"reason": ["task_struct->flags"], "call": "ioprio_get"}, {"reason": ["task_struct->flags"], "call": "vfork"}, {"reason": ["task_struct->flags"], "call": "setuid"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["task_struct->flags"], "call": "prctl"}, {"reason": ["task_struct->flags"], "call": "move_pages"}, {"reason": ["task_struct->flags"], "call": "setpriority"}, {"reason": ["task_struct->flags"], "call": "clone"}, {"reason": ["vfsmount->mnt_flags", "path->dentry", "path->mnt", "vfsmount->mnt_root"], "call": "mq_open"}, {"reason": ["task_struct->flags"], "call": "sched_getparam"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "recvfrom": [{"reason": ["file->f_flags"], "call": "eventfd2"}, {"reason": ["file->f_flags"], "call": "swapoff"}, {"reason": ["file->f_flags"], "call": "memfd_create"}, {"reason": ["file->f_flags"], "call": "remap_file_pages"}, {"reason": ["file->f_flags"], "call": "dup3"}, {"reason": ["file->f_flags"], "call": "epoll_create1"}, {"reason": ["file->f_flags"], "call": "epoll_ctl"}, {"reason": ["file->f_flags"], "call": "flock"}, {"reason": ["file->f_flags"], "call": "openat"}, {"reason": ["file->f_flags"], "call": "uselib"}, {"reason": ["file->f_flags"], "call": "accept4"}, {"reason": ["file->f_flags"], "call": "socketpair"}, {"reason": ["file->f_flags"], "call": "shmat"}, {"reason": ["file->f_flags"], "call": "socket"}, {"reason": ["file->f_flags"], "call": "pipe2"}, {"reason": ["file->f_flags"], "call": "perf_event_open"}, {"reason": ["file->f_flags"], "call": "shmdt"}, {"reason": ["file->f_flags"], "call": "acct"}, {"reason": ["file->f_flags"], "call": "open"}, {"reason": ["file->f_flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_flags"], "call": "dup"}, {"reason": ["file->f_flags"], "call": "setns"}, {"reason": ["file->f_flags"], "call": "shmctl"}, {"reason": ["file->f_flags"], "call": "swapon"}, {"reason": ["file->f_flags"], "call": "mmap_pgoff"}, {"reason": ["file->f_flags"], "call": "mq_open"}, {"reason": ["file->f_flags"], "call": "open_by_handle_at"}], "old_readdir": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "setrlimit": [{"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "keyctl"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "msgrcv"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "kill"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "sched_getaffinity"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "sched_setparam"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "ioprio_set"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "getppid"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "mq_timedreceive"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "capget"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "sched_setaffinity"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "signal"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "semtimedop"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "umount"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "setsid"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "sigaltstack"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "sched_setattr"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "migrate_pages"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "getitimer"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "setpgid"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "getsid"}, {"reason": ["rlimit->rlim_max", "rlimit->rlim_cur"], "call": "old_getrlimit"}, {"reason": ["task_struct->sighand", "rlimit->rlim_max", "task_struct->group_leader", "rlimit->rlim_cur"], "call": "prlimit64"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "perf_event_open"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "rt_sigaction"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "getpgid"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "getpriority"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "sigaction"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "setns"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "fork"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "get_robust_list"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "mq_timedsend"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "sched_getscheduler"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "ptrace"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "sched_getattr"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "getrusage"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "sched_setscheduler"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "setitimer"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "ioprio_get"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "vfork"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "prctl"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "move_pages"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "setpriority"}, {"reason": ["compat_rlimit->rlim_cur", "compat_rlimit->rlim_max"], "call": "getrlimit"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "clone"}, {"reason": ["task_struct->sighand", "task_struct->group_leader"], "call": "sched_getparam"}], "timer_create": [{"reason": ["k_clock->timer_create"], "call": "clock_getres"}, {"reason": ["k_itimer->it_pid", "k_clock->timer_create"], "call": "timer_delete"}, {"reason": ["k_clock->timer_create"], "call": "clock_gettime"}, {"reason": ["k_itimer->it_pid", "k_clock->timer_create"], "call": "timer_settime"}, {"reason": ["k_itimer->it_pid", "k_clock->timer_create"], "call": "timer_gettime"}, {"reason": ["k_clock->timer_create"], "call": "clock_settime"}, {"reason": ["k_itimer->it_pid"], "call": "timer_getoverrun"}, {"reason": ["k_clock->timer_create"], "call": "clock_nanosleep"}, {"reason": ["k_clock->timer_create"], "call": "clock_adjtime"}], "sendto": [{"reason": ["file->f_flags"], "call": "eventfd2"}, {"reason": ["file->f_flags"], "call": "swapoff"}, {"reason": ["file->f_flags"], "call": "memfd_create"}, {"reason": ["file->f_flags"], "call": "remap_file_pages"}, {"reason": ["file->f_flags"], "call": "dup3"}, {"reason": ["file->f_flags"], "call": "epoll_create1"}, {"reason": ["file->f_flags"], "call": "epoll_ctl"}, {"reason": ["file->f_flags"], "call": "flock"}, {"reason": ["file->f_flags"], "call": "openat"}, {"reason": ["file->f_flags"], "call": "uselib"}, {"reason": ["file->f_flags"], "call": "accept4"}, {"reason": ["file->f_flags"], "call": "socketpair"}, {"reason": ["file->f_flags"], "call": "shmat"}, {"reason": ["file->f_flags"], "call": "socket"}, {"reason": ["file->f_flags"], "call": "pipe2"}, {"reason": ["file->f_flags"], "call": "perf_event_open"}, {"reason": ["file->f_flags"], "call": "shmdt"}, {"reason": ["file->f_flags"], "call": "acct"}, {"reason": ["file->f_flags"], "call": "open"}, {"reason": ["file->f_flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_flags"], "call": "dup"}, {"reason": ["file->f_flags"], "call": "setns"}, {"reason": ["file->f_flags"], "call": "shmctl"}, {"reason": ["file->f_flags"], "call": "swapon"}, {"reason": ["file->f_flags"], "call": "mmap_pgoff"}, {"reason": ["file->f_flags"], "call": "mq_open"}, {"reason": ["file->f_flags"], "call": "open_by_handle_at"}], "mkdirat": [{"reason": ["super_block->s_flags"], "call": "syncfs"}, {"reason": ["super_block->s_flags"], "call": "ustat"}, {"reason": ["super_block->s_flags"], "call": "umount"}, {"reason": ["super_block->s_flags"], "call": "quotactl"}, {"reason": ["super_block->s_flags"], "call": "swapon"}], "lgetxattr": [{"reason": ["path->dentry"], "call": "eventfd2"}, {"reason": ["path->dentry"], "call": "swapoff"}, {"reason": ["path->dentry"], "call": "pivot_root"}, {"reason": ["path->dentry"], "call": "memfd_create"}, {"reason": ["path->dentry"], "call": "remap_file_pages"}, {"reason": ["path->dentry"], "call": "dup3"}, {"reason": ["path->dentry"], "call": "unshare"}, {"reason": ["path->dentry"], "call": "epoll_create1"}, {"reason": ["path->dentry"], "call": "epoll_ctl"}, {"reason": ["path->dentry"], "call": "flock"}, {"reason": ["path->dentry"], "call": "openat"}, {"reason": ["path->dentry"], "call": "lookup_dcookie"}, {"reason": ["path->dentry"], "call": "uselib"}, {"reason": ["path->dentry"], "call": "accept4"}, {"reason": ["path->dentry"], "call": "socketpair"}, {"reason": ["path->dentry"], "call": "getcwd"}, {"reason": ["path->dentry"], "call": "shmat"}, {"reason": ["path->dentry"], "call": "socket"}, {"reason": ["path->dentry"], "call": "pipe2"}, {"reason": ["path->dentry"], "call": "perf_event_open"}, {"reason": ["path->dentry"], "call": "shmdt"}, {"reason": ["path->dentry"], "call": "quotactl"}, {"reason": ["path->dentry"], "call": "acct"}, {"reason": ["path->dentry"], "call": "open"}, {"reason": ["path->dentry"], "call": "dup"}, {"reason": ["path->dentry"], "call": "setns"}, {"reason": ["path->dentry"], "call": "shmctl"}, {"reason": ["path->dentry"], "call": "swapon"}, {"reason": ["path->dentry"], "call": "mmap_pgoff"}, {"reason": ["path->dentry"], "call": "mq_open"}, {"reason": ["path->dentry"], "call": "open_by_handle_at"}], "linkat": [{"reason": ["path->mnt"], "call": "eventfd2"}, {"reason": ["path->mnt"], "call": "swapoff"}, {"reason": ["path->mnt"], "call": "pivot_root"}, {"reason": ["path->mnt"], "call": "memfd_create"}, {"reason": ["path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->mnt"], "call": "dup3"}, {"reason": ["path->mnt"], "call": "unshare"}, {"reason": ["path->mnt"], "call": "epoll_create1"}, {"reason": ["path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->mnt"], "call": "flock"}, {"reason": ["path->mnt"], "call": "openat"}, {"reason": ["path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->mnt"], "call": "uselib"}, {"reason": ["path->mnt"], "call": "accept4"}, {"reason": ["path->mnt"], "call": "socketpair"}, {"reason": ["path->mnt"], "call": "getcwd"}, {"reason": ["path->mnt"], "call": "shmat"}, {"reason": ["path->mnt"], "call": "socket"}, {"reason": ["path->mnt"], "call": "pipe2"}, {"reason": ["path->mnt"], "call": "perf_event_open"}, {"reason": ["path->mnt"], "call": "shmdt"}, {"reason": ["path->mnt"], "call": "quotactl"}, {"reason": ["path->mnt"], "call": "acct"}, {"reason": ["path->mnt"], "call": "open"}, {"reason": ["path->mnt"], "call": "dup"}, {"reason": ["path->mnt"], "call": "setns"}, {"reason": ["path->mnt"], "call": "shmctl"}, {"reason": ["path->mnt"], "call": "swapon"}, {"reason": ["path->mnt"], "call": "mmap_pgoff"}, {"reason": ["path->mnt"], "call": "mq_open"}, {"reason": ["path->mnt"], "call": "open_by_handle_at"}], "getresuid16": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "newuname": [{"reason": ["task_struct->personality"], "call": "keyctl"}, {"reason": ["task_struct->personality"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->personality"], "call": "msgrcv"}, {"reason": ["task_struct->personality"], "call": "kill"}, {"reason": ["task_struct->personality"], "call": "sched_getaffinity"}, {"reason": ["task_struct->personality"], "call": "sched_setparam"}, {"reason": ["task_struct->personality"], "call": "ioprio_set"}, {"reason": ["task_struct->personality"], "call": "personality"}, {"reason": ["task_struct->personality"], "call": "getppid"}, {"reason": ["task_struct->personality"], "call": "mq_timedreceive"}, {"reason": ["task_struct->personality"], "call": "capget"}, {"reason": ["task_struct->personality"], "call": "sched_setaffinity"}, {"reason": ["task_struct->personality"], "call": "signal"}, {"reason": ["task_struct->personality"], "call": "semtimedop"}, {"reason": ["task_struct->personality"], "call": "umount"}, {"reason": ["task_struct->personality"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->personality"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->personality"], "call": "setsid"}, {"reason": ["task_struct->personality"], "call": "sigaltstack"}, {"reason": ["task_struct->personality"], "call": "sched_setattr"}, {"reason": ["task_struct->personality"], "call": "migrate_pages"}, {"reason": ["task_struct->personality"], "call": "getitimer"}, {"reason": ["task_struct->personality"], "call": "setpgid"}, {"reason": ["task_struct->personality"], "call": "getsid"}, {"reason": ["task_struct->personality"], "call": "prlimit64"}, {"reason": ["task_struct->personality"], "call": "perf_event_open"}, {"reason": ["task_struct->personality"], "call": "rt_sigaction"}, {"reason": ["task_struct->personality"], "call": "getpgid"}, {"reason": ["task_struct->personality"], "call": "getpriority"}, {"reason": ["task_struct->personality"], "call": "sigaction"}, {"reason": ["task_struct->personality"], "call": "setns"}, {"reason": ["task_struct->personality"], "call": "fork"}, {"reason": ["task_struct->personality"], "call": "get_robust_list"}, {"reason": ["task_struct->personality"], "call": "mq_timedsend"}, {"reason": ["task_struct->personality"], "call": "sched_getscheduler"}, {"reason": ["task_struct->personality"], "call": "ptrace"}, {"reason": ["task_struct->personality"], "call": "sched_getattr"}, {"reason": ["task_struct->personality"], "call": "getrusage"}, {"reason": ["task_struct->personality"], "call": "sched_setscheduler"}, {"reason": ["task_struct->personality"], "call": "setitimer"}, {"reason": ["task_struct->personality"], "call": "ioprio_get"}, {"reason": ["task_struct->personality"], "call": "vfork"}, {"reason": ["task_struct->personality"], "call": "prctl"}, {"reason": ["task_struct->personality"], "call": "move_pages"}, {"reason": ["task_struct->personality"], "call": "setpriority"}, {"reason": ["task_struct->personality"], "call": "clone"}, {"reason": ["task_struct->personality"], "call": "sched_getparam"}], "epoll_create1": [{"reason": ["cred->user", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["cred->user"], "call": "setfsuid"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["cred->user"], "call": "getresuid16"}, {"reason": ["cred->user"], "call": "getresgid"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["cred->user"], "call": "setgid"}, {"reason": ["cred->user", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["cred->user"], "call": "capset"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["cred->user"], "call": "getresgid16"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["cred->user", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["cred->user"], "call": "setfsgid"}, {"reason": ["cred->user"], "call": "unshare"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["cred->user"], "call": "setreuid"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["cred->user"], "call": "getresuid"}, {"reason": ["eventpoll->ws", "eventpoll->user"], "call": "epoll_ctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["cred->user", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["cred->user"], "call": "setresgid"}, {"reason": ["cred->user"], "call": "setregid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["cred->user", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["cred->user"], "call": "getgroups16"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["cred->user", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["cred->user"], "call": "faccessat"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["eventpoll->ws", "eventpoll->user"], "call": "epoll_wait"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->user"], "call": "setresuid"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["cred->user", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["cred->user"], "call": "setuid"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["cred->user"], "call": "getgroups"}, {"reason": ["cred->user", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "olduname": [{"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "kill"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["task_struct->personality"], "call": "personality"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "getppid"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "mq_timedreceive"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "capget"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "signal"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "semtimedop"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "umount"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "setsid"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "sched_setattr"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "getsid"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "perf_event_open"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "setns"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "fork"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "mq_timedsend"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "sched_getattr"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "vfork"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "prctl"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "clone"}, {"reason": ["task_struct->personality", "mm_segment_t->seg"], "call": "sched_getparam"}], "tee": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags", "file->f_mode"], "call": "epoll_ctl"}, {"reason": ["fd->flags", "file->f_mode"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["fd->flags", "file->f_mode"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags", "file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "semctl": [{"reason": ["sem_array->sem_nsems"], "call": "semtimedop"}], "syslog": [{"reason": ["mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigtimedwait"}, {"reason": ["mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["mm_segment_t->seg"], "call": "kill"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["mm_segment_t->seg"], "call": "getppid"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg"], "call": "capget"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "signal"}, {"reason": ["mm_segment_t->seg"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg"], "call": "umount"}, {"reason": ["mm_segment_t->seg"], "call": "sched_rr_get_interval"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["mm_segment_t->seg"], "call": "setsid"}, {"reason": ["mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setattr"}, {"reason": ["mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["mm_segment_t->seg"], "call": "getsid"}, {"reason": ["mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["mm_segment_t->seg"], "call": "perf_event_open"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["mm_segment_t->seg"], "call": "setns"}, {"reason": ["mm_segment_t->seg"], "call": "fork"}, {"reason": ["mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["mm_segment_t->seg"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg"], "call": "vfork"}, {"reason": ["mm_segment_t->seg"], "call": "prctl"}, {"reason": ["mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["mm_segment_t->seg"], "call": "clone"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getparam"}], "rt_sigqueueinfo": [{"reason": ["siginfo->si_code"], "call": "rt_sigtimedwait"}, {"reason": ["siginfo->si_code"], "call": "kill"}, {"reason": ["siginfo->si_code"], "call": "timer_create"}, {"reason": ["siginfo->si_code"], "call": "tgkill"}, {"reason": ["siginfo->si_code"], "call": "rt_tgsigqueueinfo"}, {"reason": ["siginfo->si_code"], "call": "rt_sigreturn"}, {"reason": ["siginfo->si_code"], "call": "tkill"}], "sync_file_range": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "llseek": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "getgid": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "lsetxattr": [{"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["path->dentry", "path->mnt"], "call": "getcwd"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["path->dentry", "path->mnt"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "mq_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "pwritev": [{"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_mode"], "call": "flock"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["file->f_mode"], "call": "accept4"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}], "llistxattr": [{"reason": ["path->dentry"], "call": "eventfd2"}, {"reason": ["path->dentry"], "call": "swapoff"}, {"reason": ["path->dentry"], "call": "pivot_root"}, {"reason": ["path->dentry"], "call": "memfd_create"}, {"reason": ["path->dentry"], "call": "remap_file_pages"}, {"reason": ["path->dentry"], "call": "dup3"}, {"reason": ["path->dentry"], "call": "unshare"}, {"reason": ["path->dentry"], "call": "epoll_create1"}, {"reason": ["path->dentry"], "call": "epoll_ctl"}, {"reason": ["path->dentry"], "call": "flock"}, {"reason": ["path->dentry"], "call": "openat"}, {"reason": ["path->dentry"], "call": "lookup_dcookie"}, {"reason": ["path->dentry"], "call": "uselib"}, {"reason": ["path->dentry"], "call": "accept4"}, {"reason": ["path->dentry"], "call": "socketpair"}, {"reason": ["path->dentry"], "call": "getcwd"}, {"reason": ["path->dentry"], "call": "shmat"}, {"reason": ["path->dentry"], "call": "socket"}, {"reason": ["path->dentry"], "call": "pipe2"}, {"reason": ["path->dentry"], "call": "perf_event_open"}, {"reason": ["path->dentry"], "call": "shmdt"}, {"reason": ["path->dentry"], "call": "quotactl"}, {"reason": ["path->dentry"], "call": "acct"}, {"reason": ["path->dentry"], "call": "open"}, {"reason": ["path->dentry"], "call": "dup"}, {"reason": ["path->dentry"], "call": "setns"}, {"reason": ["path->dentry"], "call": "shmctl"}, {"reason": ["path->dentry"], "call": "swapon"}, {"reason": ["path->dentry"], "call": "mmap_pgoff"}, {"reason": ["path->dentry"], "call": "mq_open"}, {"reason": ["path->dentry"], "call": "open_by_handle_at"}], "tgkill": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "pselect6": [{"reason": ["mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg", "timespec->tv_sec", "timespec->tv_nsec"], "call": "rt_sigtimedwait"}, {"reason": ["mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_unlink"}, {"reason": ["mm_segment_t->seg"], "call": "kill"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapoff"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmod"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "memfd_create"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "readlinkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "io_getevents"}, {"reason": ["mm_segment_t->seg"], "call": "getppid"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchown"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg", "timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg"], "call": "capget"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "utime"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "signal"}, {"reason": ["mm_segment_t->seg", "timespec->tv_sec", "timespec->tv_nsec"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg"], "call": "umount"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "settimeofday"}, {"reason": ["mm_segment_t->seg", "timespec->tv_sec", "timespec->tv_nsec"], "call": "sched_rr_get_interval"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_gettime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "uselib"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["mm_segment_t->seg"], "call": "setsid"}, {"reason": ["mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setattr"}, {"reason": ["mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmodat"}, {"reason": ["mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "inotify_add_watch"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_settime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ftruncate"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_gettime"}, {"reason": ["mm_segment_t->seg"], "call": "getsid"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ioctl"}, {"reason": ["mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["mm_segment_t->seg"], "call": "perf_event_open"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "linkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "stime"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futimesat"}, {"reason": ["mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "poll"}, {"reason": ["compat_timespec->tv_sec", "compat_timespec->tv_nsec", "timespec->tv_sec", "timespec->tv_nsec"], "call": "select"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlink"}, {"reason": ["mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["compat_timespec->tv_sec", "compat_timespec->tv_nsec", "timespec->tv_sec", "timespec->tv_nsec"], "call": "nanosleep"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_getsetattr"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "faccessat"}, {"reason": ["mm_segment_t->seg"], "call": "setns"}, {"reason": ["mm_segment_t->seg"], "call": "fork"}, {"reason": ["mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["mm_segment_t->seg", "timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapon"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "epoll_wait"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getattr"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchownat"}, {"reason": ["mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fstat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_settime"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg"], "call": "vfork"}, {"reason": ["mm_segment_t->seg"], "call": "prctl"}, {"reason": ["mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_notify"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "newfstat"}, {"reason": ["mm_segment_t->seg"], "call": "clone"}, {"reason": ["compat_timespec->tv_sec", "compat_timespec->tv_nsec", "timespec->tv_sec", "timespec->tv_nsec"], "call": "clock_nanosleep"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlinkat"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getparam"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futex"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "recvmmsg"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile64"}, {"reason": ["compat_timespec->tv_sec", "compat_timespec->tv_nsec", "timespec->tv_sec", "timespec->tv_nsec"], "call": "ppoll"}], "uselib": [{"reason": ["super_block->s_iflags"], "call": "syncfs"}, {"reason": ["vfsmount->mnt_flags"], "call": "mq_unlink"}, {"reason": ["vfsmount->mnt_flags"], "call": "pivot_root"}, {"reason": ["super_block->s_iflags"], "call": "ustat"}, {"reason": ["vfsmount->mnt_flags", "super_block->s_iflags"], "call": "umount"}, {"reason": ["vfsmount->mnt_flags"], "call": "getcwd"}, {"reason": ["super_block->s_iflags"], "call": "quotactl"}, {"reason": ["vfsmount->mnt_flags"], "call": "acct"}, {"reason": ["super_block->s_iflags"], "call": "swapon"}, {"reason": ["vfsmount->mnt_flags"], "call": "mq_open"}], "sysfs": [{"reason": ["filename->name"], "call": "mq_unlink"}, {"reason": ["filename->name"], "call": "swapoff"}, {"reason": ["filename->name"], "call": "openat"}, {"reason": ["filename->name"], "call": "uselib"}, {"reason": ["filename->name"], "call": "renameat2"}, {"reason": ["filename->name"], "call": "symlinkat"}, {"reason": ["filename->name"], "call": "quotactl"}, {"reason": ["filename->name"], "call": "acct"}, {"reason": ["filename->name"], "call": "open"}, {"reason": ["filename->name"], "call": "unlink"}, {"reason": ["filename->name"], "call": "rmdir"}, {"reason": ["filename->name"], "call": "swapon"}, {"reason": ["filename->name"], "call": "mq_open"}, {"reason": ["filename->name"], "call": "unlinkat"}], "msgctl": [{"reason": ["mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigtimedwait"}, {"reason": ["ipc_namespace->msg_ctlmnb", "mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["ipc_namespace->msg_ctlmnb"], "call": "mq_unlink"}, {"reason": ["mm_segment_t->seg"], "call": "kill"}, {"reason": ["ipc_namespace->msg_ctlmnb"], "call": "msgget"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["mm_segment_t->seg"], "call": "getppid"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg"], "call": "capget"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "signal"}, {"reason": ["ipc_namespace->msg_ctlmnb", "mm_segment_t->seg"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg"], "call": "umount"}, {"reason": ["mm_segment_t->seg"], "call": "sched_rr_get_interval"}, {"reason": ["ipc_namespace->msg_ctlmnb"], "call": "semctl"}, {"reason": ["ipc_namespace->msg_ctlmnb"], "call": "shmget"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["mm_segment_t->seg"], "call": "setsid"}, {"reason": ["mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setattr"}, {"reason": ["mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["ipc_namespace->msg_ctlmnb"], "call": "semget"}, {"reason": ["mm_segment_t->seg"], "call": "getsid"}, {"reason": ["ipc_namespace->msg_ctlmnb"], "call": "shmat"}, {"reason": ["mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["mm_segment_t->seg"], "call": "perf_event_open"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["ipc_namespace->msg_ctlmnb", "mm_segment_t->seg"], "call": "setns"}, {"reason": ["mm_segment_t->seg"], "call": "fork"}, {"reason": ["mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["mm_segment_t->seg"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["ipc_namespace->msg_ctlmnb"], "call": "shmctl"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg"], "call": "vfork"}, {"reason": ["mm_segment_t->seg"], "call": "prctl"}, {"reason": ["mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["ipc_namespace->msg_ctlmnb"], "call": "msgsnd"}, {"reason": ["mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["mm_segment_t->seg"], "call": "clone"}, {"reason": ["ipc_namespace->msg_ctlmnb"], "call": "mq_open"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getparam"}], "reboot": [{"reason": ["pid_namespace->user_ns"], "call": "perf_event_open"}, {"reason": ["pid_namespace->user_ns"], "call": "acct"}, {"reason": ["pid_namespace->user_ns"], "call": "setns"}], "fremovexattr": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "setsid": [{"reason": ["signal_struct->leader"], "call": "timer_create"}, {"reason": ["signal_struct->leader"], "call": "exit_group"}], "timerfd_create": [{"reason": ["timerfd_ctx->clockid"], "call": "timerfd_gettime"}, {"reason": ["timerfd_ctx->clockid"], "call": "timerfd_settime"}], "set_trip_temp": [{"reason": ["pkg_device->cpu", "pkg_device->tj_max"], "call": "get_trip_temp"}, {"reason": ["pkg_device->cpu", "pkg_device->tj_max"], "call": "get_curr_temp"}], "sched_setattr": [{"reason": ["mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigtimedwait"}, {"reason": ["mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["mm_segment_t->seg"], "call": "kill"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["mm_segment_t->seg"], "call": "getppid"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg"], "call": "capget"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "signal"}, {"reason": ["mm_segment_t->seg"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg"], "call": "umount"}, {"reason": ["mm_segment_t->seg"], "call": "sched_rr_get_interval"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["mm_segment_t->seg"], "call": "setsid"}, {"reason": ["mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["mm_segment_t->seg"], "call": "getsid"}, {"reason": ["mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["mm_segment_t->seg"], "call": "perf_event_open"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["mm_segment_t->seg"], "call": "setns"}, {"reason": ["mm_segment_t->seg"], "call": "fork"}, {"reason": ["mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["mm_segment_t->seg"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["mm_segment_t->seg", "sched_attr->sched_policy"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg"], "call": "vfork"}, {"reason": ["mm_segment_t->seg"], "call": "prctl"}, {"reason": ["mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["mm_segment_t->seg"], "call": "clone"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getparam"}], "inotify_rm_watch": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["file->f_op"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["file->f_op"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_op"], "call": "memfd_create"}, {"reason": ["file->f_op"], "call": "remap_file_pages"}, {"reason": ["file->f_op"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["file->f_op"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["file->f_op", "fd->flags"], "call": "epoll_ctl"}, {"reason": ["file->f_op", "fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_op"], "call": "openat"}, {"reason": ["file->f_op"], "call": "uselib"}, {"reason": ["file->f_op", "fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["file->f_op"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["file->f_op"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["file->f_op"], "call": "socket"}, {"reason": ["file->f_op"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["file->f_op", "fd->flags"], "call": "perf_event_open"}, {"reason": ["file->f_op"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_op"], "call": "acct"}, {"reason": ["file->f_op"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_op"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_op"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["file->f_op"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["file->f_op"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_op"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["file->f_op"], "call": "mq_open"}, {"reason": ["file->f_op"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "renameat2": [{"reason": ["filename->refcnt", "filename->name"], "call": "sysfs"}, {"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["dentry->d_inode", "filename->refcnt", "filename->name"], "call": "mq_unlink"}, {"reason": ["filename->refcnt", "filename->name", "path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["dentry->d_inode", "path->dentry", "path->mnt"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["dentry->d_inode"], "call": "mkdirat"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["filename->refcnt", "filename->name", "path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["filename->refcnt", "filename->name", "path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["dentry->d_inode", "path->dentry", "path->mnt"], "call": "getcwd"}, {"reason": ["dentry->d_inode"], "call": "ftruncate"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["dentry->d_inode"], "call": "mknodat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["dentry->d_inode", "filename->refcnt", "filename->name"], "call": "symlinkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["dentry->d_inode"], "call": "linkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["filename->refcnt", "filename->name", "path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["filename->refcnt", "filename->name", "path->dentry", "path->mnt"], "call": "acct"}, {"reason": ["filename->refcnt", "filename->name", "path->dentry", "path->mnt"], "call": "open"}, {"reason": ["dentry->d_inode", "filename->refcnt", "filename->name"], "call": "unlink"}, {"reason": ["dentry->d_inode", "filename->refcnt", "filename->name"], "call": "rmdir"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["filename->refcnt", "filename->name", "path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["dentry->d_inode", "filename->refcnt", "filename->name", "path->dentry", "path->mnt"], "call": "mq_open"}, {"reason": ["dentry->d_inode", "filename->refcnt", "filename->name"], "call": "unlinkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "keyctl": [{"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "rt_sigtimedwait"}, {"reason": ["cred->session_keyring"], "call": "setfsuid"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "msgrcv"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "kill"}, {"reason": ["cred->session_keyring"], "call": "getresuid16"}, {"reason": ["cred->session_keyring"], "call": "getresgid"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "sched_getaffinity"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "sched_setparam"}, {"reason": ["cred->sgid", "cred->session_keyring", "cred->egid", "cred->gid"], "call": "setgid"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "cred->session_keyring", "task_struct->cred", "task_struct->pid"], "call": "ioprio_set"}, {"reason": ["cred->session_keyring"], "call": "capset"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "getppid"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "mq_timedreceive"}, {"reason": ["cred->session_keyring"], "call": "getresgid16"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "capget"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "cred->session_keyring", "task_struct->cred", "task_struct->pid"], "call": "sched_setaffinity"}, {"reason": ["cred->session_keyring"], "call": "setfsgid"}, {"reason": ["cred->session_keyring"], "call": "unshare"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "signal"}, {"reason": ["cred->uid", "cred->euid", "cred->suid", "cred->session_keyring"], "call": "setreuid"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "semtimedop"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "umount"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "sched_rr_get_interval"}, {"reason": ["cred->session_keyring"], "call": "epoll_create1"}, {"reason": ["cred->session_keyring"], "call": "getresuid"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "setsid"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "sigaltstack"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "sched_setattr"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "cred->session_keyring", "task_struct->cred", "task_struct->pid"], "call": "migrate_pages"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "getitimer"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "setpgid"}, {"reason": ["cred->sgid", "cred->session_keyring", "cred->egid", "cred->gid"], "call": "setresgid"}, {"reason": ["cred->sgid", "cred->session_keyring", "cred->egid", "cred->gid"], "call": "setregid"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "getsid"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "cred->session_keyring", "task_struct->cred", "task_struct->pid"], "call": "prlimit64"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "perf_event_open"}, {"reason": ["cred->session_keyring"], "call": "getgroups16"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "rt_sigaction"}, {"reason": ["key_type->read", "key_type->name", "key->quotalen", "key->serial", "key->description", "key->perm"], "call": "request_key"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "getpgid"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "cred->session_keyring", "task_struct->cred", "task_struct->pid"], "call": "getpriority"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "sigaction"}, {"reason": ["cred->session_keyring"], "call": "faccessat"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "setns"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "fork"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "get_robust_list"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "mq_timedsend"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "sched_getscheduler"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "ptrace"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "sched_getattr"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "getrusage"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "sched_setscheduler"}, {"reason": ["cred->uid", "cred->euid", "cred->suid", "cred->session_keyring"], "call": "setresuid"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "setitimer"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "cred->session_keyring", "task_struct->cred", "task_struct->pid"], "call": "ioprio_get"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "vfork"}, {"reason": ["cred->uid", "cred->euid", "cred->suid", "cred->session_keyring"], "call": "setuid"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "prctl"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "move_pages"}, {"reason": ["cred->session_keyring"], "call": "getgroups"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "cred->session_keyring", "task_struct->cred", "task_struct->pid"], "call": "setpriority"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "clone"}, {"reason": ["task_struct->mm", "task_struct->real_cred", "task_struct->cred", "task_struct->pid"], "call": "sched_getparam"}], "settimeofday": [{"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "waitid"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "adjtimex"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "getitimer"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "select"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "wait4"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "getrusage"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "setitimer"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "clock_adjtime"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "alarm"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "ppoll"}], "utimensat": [{"reason": ["timespec->tv_nsec"], "call": "rt_sigtimedwait"}, {"reason": ["timespec->tv_nsec"], "call": "mq_unlink"}, {"reason": ["timespec->tv_nsec"], "call": "swapoff"}, {"reason": ["timespec->tv_nsec"], "call": "fchmod"}, {"reason": ["timespec->tv_nsec"], "call": "memfd_create"}, {"reason": ["timespec->tv_nsec"], "call": "readlinkat"}, {"reason": ["timespec->tv_nsec"], "call": "io_getevents"}, {"reason": ["timespec->tv_nsec"], "call": "fchown"}, {"reason": ["timespec->tv_nsec"], "call": "mq_timedreceive"}, {"reason": ["timespec->tv_nsec"], "call": "utime"}, {"reason": ["timespec->tv_nsec"], "call": "semtimedop"}, {"reason": ["timespec->tv_nsec"], "call": "settimeofday"}, {"reason": ["timespec->tv_nsec"], "call": "sched_rr_get_interval"}, {"reason": ["timespec->tv_nsec"], "call": "timerfd_gettime"}, {"reason": ["timespec->tv_nsec"], "call": "pselect6"}, {"reason": ["timespec->tv_nsec"], "call": "uselib"}, {"reason": ["timespec->tv_nsec"], "call": "fchmodat"}, {"reason": ["timespec->tv_nsec"], "call": "inotify_add_watch"}, {"reason": ["timespec->tv_nsec"], "call": "timer_settime"}, {"reason": ["timespec->tv_nsec"], "call": "ftruncate"}, {"reason": ["timespec->tv_nsec"], "call": "timer_gettime"}, {"reason": ["timespec->tv_nsec"], "call": "ioctl"}, {"reason": ["timespec->tv_nsec"], "call": "linkat"}, {"reason": ["timespec->tv_nsec"], "call": "stime"}, {"reason": ["timespec->tv_nsec"], "call": "futimesat"}, {"reason": ["timespec->tv_nsec"], "call": "poll"}, {"reason": ["timespec->tv_nsec"], "call": "select"}, {"reason": ["timespec->tv_nsec"], "call": "unlink"}, {"reason": ["timespec->tv_nsec"], "call": "nanosleep"}, {"reason": ["timespec->tv_nsec"], "call": "mq_getsetattr"}, {"reason": ["timespec->tv_nsec"], "call": "faccessat"}, {"reason": ["timespec->tv_nsec"], "call": "mq_timedsend"}, {"reason": ["timespec->tv_nsec"], "call": "swapon"}, {"reason": ["timespec->tv_nsec"], "call": "epoll_wait"}, {"reason": ["timespec->tv_nsec"], "call": "fchownat"}, {"reason": ["timespec->tv_nsec"], "call": "fstat"}, {"reason": ["timespec->tv_nsec"], "call": "timerfd_settime"}, {"reason": ["timespec->tv_nsec"], "call": "mq_notify"}, {"reason": ["timespec->tv_nsec"], "call": "sendfile"}, {"reason": ["timespec->tv_nsec"], "call": "newfstat"}, {"reason": ["timespec->tv_nsec"], "call": "clock_nanosleep"}, {"reason": ["timespec->tv_nsec"], "call": "unlinkat"}, {"reason": ["timespec->tv_nsec"], "call": "futex"}, {"reason": ["timespec->tv_nsec"], "call": "recvmmsg"}, {"reason": ["timespec->tv_nsec"], "call": "sendfile64"}, {"reason": ["timespec->tv_nsec"], "call": "ppoll"}], "fcntl": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags", "file->f_mode"], "call": "epoll_ctl"}, {"reason": ["fd->flags", "file->f_mode"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["fd->flags", "file->f_mode"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags", "file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "migrate_pages": [{"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "msgrcv"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "kill"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "sched_setparam"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "getppid"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "capget"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "signal"}, {"reason": ["cred->uid", "cred->euid", "cred->suid"], "call": "setreuid"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "umount"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "setsid"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "sched_setattr"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "setpgid"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "getsid"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "perf_event_open"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "getpgid"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "sigaction"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "setns"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "fork"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "get_robust_list"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "ptrace"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->uid", "cred->euid", "cred->suid"], "call": "setresuid"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "vfork"}, {"reason": ["cred->uid", "cred->euid", "cred->suid"], "call": "setuid"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "prctl"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "move_pages"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "setpriority"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "clone"}, {"reason": ["mm_segment_t->seg", "task_struct->real_cred", "task_struct->cred"], "call": "sched_getparam"}], "getitimer": [{"reason": ["signal_struct->it_real_incr"], "call": "timer_create"}, {"reason": ["signal_struct->it_real_incr"], "call": "exit_group"}, {"reason": ["signal_struct->it_real_incr"], "call": "setitimer"}], "fchmodat": [{"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["path->dentry", "path->mnt"], "call": "getcwd"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["path->dentry", "path->mnt"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "mq_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "lstat": [{"reason": ["__old_kernel_stat->st_nlink", "__old_kernel_stat->st_ino"], "call": "stat"}, {"reason": ["kstat->ino", "kstat->nlink", "__old_kernel_stat->st_nlink", "kstat->dev", "__old_kernel_stat->st_ino", "kstat->rdev"], "call": "fstat"}, {"reason": ["kstat->ino", "kstat->nlink", "kstat->rdev", "kstat->dev"], "call": "newfstat"}], "init_module": [{"reason": ["module->args", "module->kp", "module_layout->base", "module_layout->size", "module->num_kp"], "call": "delete_module"}, {"reason": ["module->args", "load_info->num_debug", "module->kp", "load_info->debug", "load_info->hdr", "load_info->len", "module_layout->size", "module_layout->base", "module->num_kp"], "call": "finit_module"}], "setresgid": [{"reason": ["cred->user_ns", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["cred->user_ns"], "call": "setfsuid"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["cred->user_ns"], "call": "getresuid16"}, {"reason": ["cred->user_ns"], "call": "getresgid"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["cred->user_ns", "cred->sgid", "cred->egid", "cred->gid"], "call": "setgid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["cred->user_ns"], "call": "capset"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["cred->user_ns"], "call": "getresgid16"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["cred->user_ns"], "call": "setfsgid"}, {"reason": ["cred->user_ns"], "call": "unshare"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["cred->user_ns"], "call": "setreuid"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["cred->user_ns"], "call": "epoll_create1"}, {"reason": ["cred->user_ns"], "call": "getresuid"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["cred->user_ns", "cred->sgid", "cred->egid", "cred->gid"], "call": "setregid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["cred->user_ns"], "call": "getgroups16"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["cred->user_ns"], "call": "faccessat"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->user_ns"], "call": "setresuid"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["cred->user_ns"], "call": "setuid"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["cred->user_ns"], "call": "getgroups"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "getcwd": [{"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["dentry->d_parent", "vfsmount->mnt_root"], "call": "mq_unlink"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["dentry->d_parent", "path->dentry", "path->mnt", "vfsmount->mnt_root"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["vfsmount->mnt_root"], "call": "umount"}, {"reason": ["dentry->d_parent"], "call": "mkdirat"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["dentry->d_parent"], "call": "renameat2"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["dentry->d_parent"], "call": "ftruncate"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["dentry->d_parent"], "call": "mknodat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["dentry->d_parent"], "call": "symlinkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["dentry->d_parent"], "call": "linkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["path->dentry", "path->mnt", "vfsmount->mnt_root"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["dentry->d_parent"], "call": "unlink"}, {"reason": ["dentry->d_parent"], "call": "rmdir"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["dentry->d_parent", "path->dentry", "path->mnt", "vfsmount->mnt_root"], "call": "mq_open"}, {"reason": ["dentry->d_parent"], "call": "unlinkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "inotify_add_watch": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["file->f_op"], "call": "eventfd2"}, {"reason": ["dentry->d_inode"], "call": "mq_unlink"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["file->f_op"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["dentry->d_inode"], "call": "pivot_root"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_op"], "call": "memfd_create"}, {"reason": ["file->f_op"], "call": "remap_file_pages"}, {"reason": ["file->f_op"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["dentry->d_inode"], "call": "mkdirat"}, {"reason": ["file->f_op"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["file->f_op", "fd->flags"], "call": "epoll_ctl"}, {"reason": ["file->f_op", "fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_op"], "call": "openat"}, {"reason": ["file->f_op"], "call": "uselib"}, {"reason": ["dentry->d_inode"], "call": "renameat2"}, {"reason": ["file->f_op", "fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_op"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["dentry->d_inode"], "call": "getcwd"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["dentry->d_inode", "fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["file->f_op"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["dentry->d_inode"], "call": "mknodat"}, {"reason": ["file->f_op"], "call": "socket"}, {"reason": ["dentry->d_inode"], "call": "symlinkat"}, {"reason": ["file->f_op"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["file->f_op", "fd->flags"], "call": "perf_event_open"}, {"reason": ["dentry->d_inode"], "call": "linkat"}, {"reason": ["file->f_op"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_op"], "call": "acct"}, {"reason": ["file->f_op"], "call": "open"}, {"reason": ["dentry->d_inode"], "call": "unlink"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["dentry->d_inode"], "call": "rmdir"}, {"reason": ["file->f_op"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_op"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["file->f_op"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["file->f_op"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_op"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["dentry->d_inode", "file->f_op"], "call": "mq_open"}, {"reason": ["dentry->d_inode"], "call": "unlinkat"}, {"reason": ["file->f_op"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "preadv2": [{"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_mode"], "call": "flock"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["file->f_mode"], "call": "accept4"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}], "timer_settime": [{"reason": ["k_clock->timer_set"], "call": "clock_getres"}, {"reason": ["k_clock->timer_set"], "call": "timer_delete"}, {"reason": ["k_clock->timer_set"], "call": "timer_create"}, {"reason": ["k_clock->timer_set"], "call": "clock_gettime"}, {"reason": ["k_clock->timer_set"], "call": "timer_gettime"}, {"reason": ["k_clock->timer_set"], "call": "clock_settime"}, {"reason": ["k_clock->timer_set"], "call": "clock_nanosleep"}, {"reason": ["k_clock->timer_set"], "call": "clock_adjtime"}], "setregid": [{"reason": ["cred->user_ns", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["cred->user_ns"], "call": "setfsuid"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["cred->user_ns"], "call": "getresuid16"}, {"reason": ["cred->user_ns"], "call": "getresgid"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["cred->user_ns", "cred->sgid", "cred->egid", "cred->gid"], "call": "setgid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["cred->user_ns"], "call": "capset"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["cred->user_ns"], "call": "getresgid16"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["cred->user_ns"], "call": "setfsgid"}, {"reason": ["cred->user_ns"], "call": "unshare"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["cred->user_ns"], "call": "setreuid"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["cred->user_ns"], "call": "epoll_create1"}, {"reason": ["cred->user_ns"], "call": "getresuid"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["cred->user_ns", "cred->sgid", "cred->egid", "cred->gid"], "call": "setresgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["cred->user_ns"], "call": "getgroups16"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["cred->user_ns"], "call": "faccessat"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->user_ns"], "call": "setresuid"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["cred->user_ns"], "call": "setuid"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["cred->user_ns"], "call": "getgroups"}, {"reason": ["cred->user_ns", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "fchdir": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["path->dentry"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["path->dentry"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["path->dentry"], "call": "pivot_root"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["path->dentry"], "call": "memfd_create"}, {"reason": ["path->dentry"], "call": "remap_file_pages"}, {"reason": ["path->dentry"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["path->dentry"], "call": "unshare"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["path->dentry"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags", "path->dentry"], "call": "epoll_ctl"}, {"reason": ["fd->flags", "path->dentry"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["path->dentry"], "call": "openat"}, {"reason": ["path->dentry"], "call": "lookup_dcookie"}, {"reason": ["path->dentry"], "call": "uselib"}, {"reason": ["fd->flags", "path->dentry"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["path->dentry"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["path->dentry"], "call": "getcwd"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["path->dentry"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["path->dentry"], "call": "socket"}, {"reason": ["path->dentry"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags", "path->dentry"], "call": "perf_event_open"}, {"reason": ["path->dentry"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["path->dentry"], "call": "quotactl"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["path->dentry"], "call": "acct"}, {"reason": ["path->dentry"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["path->dentry"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["path->dentry"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["path->dentry"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["path->dentry"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["path->dentry"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["path->dentry"], "call": "mq_open"}, {"reason": ["path->dentry"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "ftruncate": [{"reason": ["file->f_flags", "file->f_mode"], "call": "eventfd2"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "mq_unlink"}, {"reason": ["inode->i_flags", "inode->i_sb", "file->f_flags", "file->f_mode"], "call": "swapoff"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "fchmod"}, {"reason": ["inode->i_flags", "inode->i_sb", "file->f_flags", "file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "dup3"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "readlinkat"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "fchown"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "mq_timedreceive"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "flock"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "openat"}, {"reason": ["inode->i_flags", "inode->i_sb", "file->f_flags", "file->f_mode"], "call": "uselib"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "accept4"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "socketpair"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "fchmodat"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "inotify_add_watch"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "shmat"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "socket"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "pipe2"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "ioctl"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "perf_event_open"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "linkat"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "acct"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "open"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "unlink"}, {"reason": ["inode->i_flags", "inode->i_sb", "file->f_flags"], "call": "mq_getsetattr"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "faccessat"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "dup"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "setns"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "mq_timedsend"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "shmctl"}, {"reason": ["inode->i_flags", "inode->i_sb", "file->f_flags", "file->f_mode"], "call": "swapon"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "fchownat"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "mq_notify"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "sendfile"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "mq_open"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "unlinkat"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "open_by_handle_at"}, {"reason": ["inode->i_flags", "inode->i_sb"], "call": "sendfile64"}], "timer_gettime": [{"reason": ["k_clock->timer_get"], "call": "clock_getres"}, {"reason": ["k_clock->timer_get"], "call": "timer_delete"}, {"reason": ["k_clock->timer_get"], "call": "timer_create"}, {"reason": ["k_clock->timer_get"], "call": "clock_gettime"}, {"reason": ["k_clock->timer_get"], "call": "timer_settime"}, {"reason": ["k_clock->timer_get"], "call": "clock_settime"}, {"reason": ["k_clock->timer_get"], "call": "clock_nanosleep"}, {"reason": ["k_clock->timer_get"], "call": "clock_adjtime"}], "msgsnd": [{"reason": ["ipc_namespace->msg_ctlmax"], "call": "msgrcv"}, {"reason": ["ipc_namespace->msg_ctlmax"], "call": "mq_unlink"}, {"reason": ["ipc_namespace->msg_ctlmax"], "call": "msgget"}, {"reason": ["ipc_namespace->msg_ctlmax"], "call": "semtimedop"}, {"reason": ["ipc_namespace->msg_ctlmax"], "call": "semctl"}, {"reason": ["ipc_namespace->msg_ctlmax"], "call": "shmget"}, {"reason": ["ipc_namespace->msg_ctlmax"], "call": "msgctl"}, {"reason": ["ipc_namespace->msg_ctlmax"], "call": "semget"}, {"reason": ["ipc_namespace->msg_ctlmax"], "call": "shmat"}, {"reason": ["ipc_namespace->msg_ctlmax"], "call": "setns"}, {"reason": ["ipc_namespace->msg_ctlmax"], "call": "shmctl"}, {"reason": ["ipc_namespace->msg_ctlmax"], "call": "mq_open"}], "sysinfo": [{"reason": ["mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg", "timespec->tv_nsec"], "call": "rt_sigtimedwait"}, {"reason": ["mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["timespec->tv_nsec"], "call": "mq_unlink"}, {"reason": ["mm_segment_t->seg"], "call": "kill"}, {"reason": ["timespec->tv_nsec"], "call": "swapoff"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["timespec->tv_nsec"], "call": "fchmod"}, {"reason": ["timespec->tv_nsec"], "call": "memfd_create"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["timespec->tv_nsec"], "call": "readlinkat"}, {"reason": ["timespec->tv_nsec"], "call": "io_getevents"}, {"reason": ["mm_segment_t->seg"], "call": "getppid"}, {"reason": ["timespec->tv_nsec"], "call": "fchown"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg", "timespec->tv_nsec"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg"], "call": "capget"}, {"reason": ["timespec->tv_nsec"], "call": "utime"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "signal"}, {"reason": ["mm_segment_t->seg", "timespec->tv_nsec"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg"], "call": "umount"}, {"reason": ["timespec->tv_nsec"], "call": "settimeofday"}, {"reason": ["mm_segment_t->seg", "timespec->tv_nsec"], "call": "sched_rr_get_interval"}, {"reason": ["timespec->tv_nsec"], "call": "timerfd_gettime"}, {"reason": ["timespec->tv_nsec"], "call": "pselect6"}, {"reason": ["timespec->tv_nsec"], "call": "uselib"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["mm_segment_t->seg"], "call": "setsid"}, {"reason": ["mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setattr"}, {"reason": ["mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["timespec->tv_nsec"], "call": "fchmodat"}, {"reason": ["mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["timespec->tv_nsec"], "call": "inotify_add_watch"}, {"reason": ["timespec->tv_nsec"], "call": "timer_settime"}, {"reason": ["timespec->tv_nsec"], "call": "ftruncate"}, {"reason": ["timespec->tv_nsec"], "call": "timer_gettime"}, {"reason": ["mm_segment_t->seg"], "call": "getsid"}, {"reason": ["timespec->tv_nsec"], "call": "ioctl"}, {"reason": ["mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["mm_segment_t->seg"], "call": "perf_event_open"}, {"reason": ["timespec->tv_nsec"], "call": "linkat"}, {"reason": ["timespec->tv_nsec"], "call": "stime"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["timespec->tv_nsec"], "call": "futimesat"}, {"reason": ["mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["timespec->tv_nsec"], "call": "poll"}, {"reason": ["timespec->tv_nsec"], "call": "select"}, {"reason": ["timespec->tv_nsec"], "call": "unlink"}, {"reason": ["mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["timespec->tv_nsec"], "call": "nanosleep"}, {"reason": ["timespec->tv_nsec"], "call": "mq_getsetattr"}, {"reason": ["timespec->tv_nsec"], "call": "faccessat"}, {"reason": ["mm_segment_t->seg"], "call": "setns"}, {"reason": ["mm_segment_t->seg"], "call": "fork"}, {"reason": ["mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["mm_segment_t->seg", "timespec->tv_nsec"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["timespec->tv_nsec"], "call": "swapon"}, {"reason": ["timespec->tv_nsec"], "call": "epoll_wait"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getattr"}, {"reason": ["timespec->tv_nsec"], "call": "fchownat"}, {"reason": ["mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["timespec->tv_nsec"], "call": "fstat"}, {"reason": ["timespec->tv_nsec"], "call": "timerfd_settime"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg"], "call": "vfork"}, {"reason": ["mm_segment_t->seg"], "call": "prctl"}, {"reason": ["mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["timespec->tv_nsec"], "call": "mq_notify"}, {"reason": ["timespec->tv_nsec"], "call": "sendfile"}, {"reason": ["timespec->tv_nsec"], "call": "newfstat"}, {"reason": ["mm_segment_t->seg"], "call": "clone"}, {"reason": ["timespec->tv_nsec"], "call": "clock_nanosleep"}, {"reason": ["timespec->tv_nsec"], "call": "unlinkat"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getparam"}, {"reason": ["timespec->tv_nsec"], "call": "futex"}, {"reason": ["timespec->tv_nsec"], "call": "recvmmsg"}, {"reason": ["timespec->tv_nsec"], "call": "sendfile64"}, {"reason": ["timespec->tv_nsec"], "call": "ppoll"}], "geteuid16": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "setpgid": [{"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "keyctl"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "msgrcv"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "kill"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "sched_getaffinity"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "sched_setparam"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "ioprio_set"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "getppid"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "mq_timedreceive"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "capget"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "sched_setaffinity"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "signal"}, {"reason": ["task_struct->flags"], "call": "setreuid"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "semtimedop"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "umount"}, {"reason": ["signal_struct->leader"], "call": "timer_create"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "signal_struct->leader", "task_struct->signal"], "call": "setsid"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "sigaltstack"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "sched_setattr"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "migrate_pages"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "getitimer"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "getsid"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "prlimit64"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "perf_event_open"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "rt_sigaction"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "getpgid"}, {"reason": ["signal_struct->leader"], "call": "exit_group"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "getpriority"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "sigaction"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "setns"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "fork"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "get_robust_list"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "mq_timedsend"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "sched_getscheduler"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "ptrace"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "sched_getattr"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "getrusage"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "sched_setscheduler"}, {"reason": ["task_struct->flags"], "call": "setresuid"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "setitimer"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "ioprio_get"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "vfork"}, {"reason": ["task_struct->flags"], "call": "setuid"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "prctl"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "move_pages"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "setpriority"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "clone"}, {"reason": ["task_struct->exit_signal", "task_struct->real_parent", "task_struct->flags", "task_struct->signal"], "call": "sched_getparam"}], "mknodat": [{"reason": ["super_block->s_flags"], "call": "syncfs"}, {"reason": ["super_block->s_flags"], "call": "ustat"}, {"reason": ["super_block->s_flags"], "call": "umount"}, {"reason": ["super_block->s_flags"], "call": "quotactl"}, {"reason": ["super_block->s_flags"], "call": "swapon"}], "shmat": [{"reason": ["task_struct->mm"], "call": "keyctl"}, {"reason": ["task_struct->mm"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->mm"], "call": "msgrcv"}, {"reason": ["path->dentry"], "call": "eventfd2"}, {"reason": ["task_struct->mm"], "call": "kill"}, {"reason": ["path->dentry"], "call": "swapoff"}, {"reason": ["task_struct->mm"], "call": "sched_getaffinity"}, {"reason": ["task_struct->mm"], "call": "sched_setparam"}, {"reason": ["path->dentry"], "call": "pivot_root"}, {"reason": ["path->dentry"], "call": "memfd_create"}, {"reason": ["task_struct->mm"], "call": "ioprio_set"}, {"reason": ["path->dentry"], "call": "remap_file_pages"}, {"reason": ["path->dentry"], "call": "dup3"}, {"reason": ["task_struct->mm"], "call": "getppid"}, {"reason": ["task_struct->mm"], "call": "mq_timedreceive"}, {"reason": ["task_struct->mm"], "call": "capget"}, {"reason": ["task_struct->mm"], "call": "sched_setaffinity"}, {"reason": ["path->dentry"], "call": "unshare"}, {"reason": ["task_struct->mm"], "call": "signal"}, {"reason": ["task_struct->mm"], "call": "semtimedop"}, {"reason": ["task_struct->mm"], "call": "umount"}, {"reason": ["task_struct->mm"], "call": "sched_rr_get_interval"}, {"reason": ["path->dentry"], "call": "epoll_create1"}, {"reason": ["path->dentry"], "call": "epoll_ctl"}, {"reason": ["path->dentry"], "call": "flock"}, {"reason": ["path->dentry"], "call": "openat"}, {"reason": ["path->dentry"], "call": "lookup_dcookie"}, {"reason": ["path->dentry"], "call": "uselib"}, {"reason": ["task_struct->mm"], "call": "rt_sigprocmask"}, {"reason": ["path->dentry"], "call": "accept4"}, {"reason": ["task_struct->mm"], "call": "setsid"}, {"reason": ["task_struct->mm"], "call": "sigaltstack"}, {"reason": ["task_struct->mm"], "call": "sched_setattr"}, {"reason": ["path->dentry"], "call": "socketpair"}, {"reason": ["task_struct->mm"], "call": "migrate_pages"}, {"reason": ["task_struct->mm"], "call": "getitimer"}, {"reason": ["task_struct->mm"], "call": "setpgid"}, {"reason": ["path->dentry"], "call": "getcwd"}, {"reason": ["task_struct->mm"], "call": "getsid"}, {"reason": ["path->dentry"], "call": "socket"}, {"reason": ["path->dentry"], "call": "pipe2"}, {"reason": ["task_struct->mm"], "call": "prlimit64"}, {"reason": ["task_struct->mm", "path->dentry"], "call": "perf_event_open"}, {"reason": ["path->dentry"], "call": "shmdt"}, {"reason": ["path->dentry"], "call": "quotactl"}, {"reason": ["task_struct->mm"], "call": "rt_sigaction"}, {"reason": ["task_struct->mm"], "call": "getpgid"}, {"reason": ["path->dentry"], "call": "acct"}, {"reason": ["path->dentry"], "call": "open"}, {"reason": ["task_struct->mm"], "call": "getpriority"}, {"reason": ["task_struct->mm"], "call": "sigaction"}, {"reason": ["path->dentry"], "call": "dup"}, {"reason": ["task_struct->mm", "path->dentry"], "call": "setns"}, {"reason": ["task_struct->mm"], "call": "fork"}, {"reason": ["task_struct->mm"], "call": "get_robust_list"}, {"reason": ["task_struct->mm"], "call": "mq_timedsend"}, {"reason": ["task_struct->mm"], "call": "sched_getscheduler"}, {"reason": ["task_struct->mm"], "call": "ptrace"}, {"reason": ["path->dentry", "shmid_kernel->shm_file"], "call": "shmctl"}, {"reason": ["path->dentry"], "call": "swapon"}, {"reason": ["task_struct->mm"], "call": "sched_getattr"}, {"reason": ["task_struct->mm"], "call": "getrusage"}, {"reason": ["task_struct->mm"], "call": "sched_setscheduler"}, {"reason": ["task_struct->mm"], "call": "setitimer"}, {"reason": ["task_struct->mm"], "call": "ioprio_get"}, {"reason": ["task_struct->mm"], "call": "vfork"}, {"reason": ["path->dentry"], "call": "mmap_pgoff"}, {"reason": ["task_struct->mm"], "call": "prctl"}, {"reason": ["task_struct->mm"], "call": "move_pages"}, {"reason": ["task_struct->mm"], "call": "setpriority"}, {"reason": ["task_struct->mm"], "call": "clone"}, {"reason": ["path->dentry"], "call": "mq_open"}, {"reason": ["task_struct->mm"], "call": "sched_getparam"}, {"reason": ["path->dentry"], "call": "open_by_handle_at"}], "setsockopt": [{"reason": ["proto_ops->compat_setsockopt"], "call": "accept4"}], "old_getrlimit": [{"reason": ["rlimit->rlim_max", "rlimit->rlim_cur"], "call": "setrlimit"}, {"reason": ["rlimit->rlim_max", "rlimit->rlim_cur"], "call": "prlimit64"}], "msync": [{"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "remap_file_pages"}, {"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "shmdt"}, {"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "brk"}, {"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "get_mempolicy"}, {"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "munlockall"}, {"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "pkey_mprotect"}, {"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "madvise"}, {"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "mprotect"}, {"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "mremap"}, {"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "prctl"}, {"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "munlock"}, {"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "mincore"}, {"reason": ["vm_area_struct->vm_flags", "vm_area_struct->vm_file"], "call": "mlockall"}], "getegid16": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "ioctl": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "prlimit64": [{"reason": ["task_struct->sighand", "cred->user_ns", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["cred->user_ns"], "call": "setfsuid"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "kill"}, {"reason": ["cred->user_ns"], "call": "getresuid16"}, {"reason": ["cred->user_ns"], "call": "getresgid"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "sched_setparam"}, {"reason": ["cred->user_ns", "cred->sgid", "cred->egid", "cred->gid"], "call": "setgid"}, {"reason": ["task_struct->sighand", "cred->user_ns", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["cred->user_ns"], "call": "capset"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["cred->user_ns"], "call": "getresgid16"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->sighand", "cred->user_ns", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["cred->user_ns"], "call": "setfsgid"}, {"reason": ["cred->user_ns"], "call": "unshare"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "signal"}, {"reason": ["cred->uid", "cred->user_ns", "cred->suid", "cred->euid"], "call": "setreuid"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["cred->user_ns"], "call": "epoll_create1"}, {"reason": ["cred->user_ns"], "call": "getresuid"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "sched_setattr"}, {"reason": ["rlimit->rlim_max", "rlimit->rlim_cur"], "call": "setrlimit"}, {"reason": ["task_struct->sighand", "cred->user_ns", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "setpgid"}, {"reason": ["cred->user_ns", "cred->sgid", "cred->egid", "cred->gid"], "call": "setresgid"}, {"reason": ["cred->user_ns", "cred->sgid", "cred->egid", "cred->gid"], "call": "setregid"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "getsid"}, {"reason": ["rlimit->rlim_max", "rlimit->rlim_cur"], "call": "old_getrlimit"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "perf_event_open"}, {"reason": ["cred->user_ns"], "call": "getgroups16"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->sighand", "cred->user_ns", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "sigaction"}, {"reason": ["cred->user_ns"], "call": "faccessat"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->uid", "cred->user_ns", "cred->suid", "cred->euid"], "call": "setresuid"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->sighand", "cred->user_ns", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "vfork"}, {"reason": ["cred->uid", "cred->user_ns", "cred->suid", "cred->euid"], "call": "setuid"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "move_pages"}, {"reason": ["cred->user_ns"], "call": "getgroups"}, {"reason": ["task_struct->sighand", "cred->user_ns", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->sighand", "task_struct->real_cred", "task_struct->group_leader", "task_struct->cred"], "call": "sched_getparam"}], "set_mempolicy": [{"reason": ["mempolicy->mode"], "call": "get_mempolicy"}, {"reason": ["mempolicy->mode"], "call": "mbind"}], "pwrite64": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags", "file->f_mode"], "call": "epoll_ctl"}, {"reason": ["fd->flags", "file->f_mode"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["fd->flags", "file->f_mode"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags", "file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "perf_event_open": [{"reason": ["list_head->prev", "fd->flags"], "call": "syncfs"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "keyctl"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "rt_sigtimedwait"}, {"reason": ["list_head->prev", "fd->flags"], "call": "vmsplice"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "msgrcv"}, {"reason": ["file->f_op", "list_head->prev"], "call": "eventfd2"}, {"reason": ["list_head->prev"], "call": "mq_unlink"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "kill"}, {"reason": ["file->f_op", "list_head->prev"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["list_head->prev", "fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["list_head->prev"], "call": "timer_delete"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "sched_getaffinity"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "sched_setparam"}, {"reason": ["list_head->prev", "fd->flags"], "call": "fchmod"}, {"reason": ["list_head->prev"], "call": "setgid"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["list_head->prev"], "call": "pivot_root"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_op", "list_head->prev"], "call": "memfd_create"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "ioprio_set"}, {"reason": ["list_head->prev"], "call": "delete_module"}, {"reason": ["file->f_op", "list_head->prev"], "call": "remap_file_pages"}, {"reason": ["file->f_op", "list_head->prev"], "call": "dup3"}, {"reason": ["list_head->prev"], "call": "readlinkat"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["list_head->prev"], "call": "io_getevents"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "getppid"}, {"reason": ["list_head->prev", "fd->flags"], "call": "fchown"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["list_head->prev", "fd->flags", "mm_segment_t->seg", "task_struct->flags"], "call": "mq_timedreceive"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "capget"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "sched_setaffinity"}, {"reason": ["list_head->prev"], "call": "ustat"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["list_head->prev", "fd->flags"], "call": "bpf"}, {"reason": ["list_head->prev"], "call": "unshare"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "signal"}, {"reason": ["list_head->prev", "task_struct->flags"], "call": "setreuid"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "semtimedop"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "umount"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["list_head->prev"], "call": "timer_create"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["list_head->prev"], "call": "mkdirat"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "sched_rr_get_interval"}, {"reason": ["file->f_op", "list_head->prev"], "call": "epoll_create1"}, {"reason": ["list_head->prev"], "call": "timerfd_gettime"}, {"reason": ["list_head->prev", "fd->flags"], "call": "tee"}, {"reason": ["list_head->prev"], "call": "semctl"}, {"reason": ["list_head->prev", "fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["file->f_op", "list_head->prev", "fd->flags"], "call": "epoll_ctl"}, {"reason": ["file->f_op", "list_head->prev", "fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_op", "list_head->prev"], "call": "openat"}, {"reason": ["list_head->prev"], "call": "lookup_dcookie"}, {"reason": ["file->f_op", "list_head->prev"], "call": "uselib"}, {"reason": ["list_head->prev"], "call": "renameat2"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "rt_sigprocmask"}, {"reason": ["file->f_op", "list_head->prev", "fd->flags"], "call": "accept4"}, {"reason": ["list_head->prev"], "call": "msgctl"}, {"reason": ["list_head->prev"], "call": "reboot"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "setsid"}, {"reason": ["list_head->prev"], "call": "set_trip_temp"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "sigaltstack"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "sched_setattr"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["list_head->prev", "fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_op", "list_head->prev"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "migrate_pages"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "getitimer"}, {"reason": ["list_head->prev"], "call": "fchmodat"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "setpgid"}, {"reason": ["list_head->prev"], "call": "init_module"}, {"reason": ["list_head->prev"], "call": "setresgid"}, {"reason": ["list_head->prev"], "call": "getcwd"}, {"reason": ["list_head->prev", "fd->flags"], "call": "inotify_add_watch"}, {"reason": ["list_head->prev"], "call": "get_trip_temp"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["list_head->prev"], "call": "timer_settime"}, {"reason": ["list_head->prev"], "call": "setregid"}, {"reason": ["list_head->prev", "fd->flags"], "call": "splice"}, {"reason": ["list_head->prev", "fd->flags"], "call": "ftruncate"}, {"reason": ["list_head->prev"], "call": "timer_gettime"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "getsid"}, {"reason": ["file->f_op", "list_head->prev"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["list_head->prev"], "call": "mknodat"}, {"reason": ["file->f_op", "list_head->prev"], "call": "socket"}, {"reason": ["list_head->prev"], "call": "symlinkat"}, {"reason": ["file->f_op", "list_head->prev"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["list_head->prev", "fd->flags"], "call": "ioctl"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "prlimit64"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["list_head->prev"], "call": "linkat"}, {"reason": ["list_head->prev"], "call": "getgroups16"}, {"reason": ["file->f_op", "list_head->prev"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["list_head->prev"], "call": "quotactl"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "rt_sigaction"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["list_head->prev"], "call": "request_key"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "getpgid"}, {"reason": ["list_head->prev"], "call": "brk"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_op", "list_head->prev"], "call": "acct"}, {"reason": ["file->f_op", "list_head->prev"], "call": "open"}, {"reason": ["list_head->prev"], "call": "unlink"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["list_head->prev"], "call": "exit_group"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "getpriority"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "sigaction"}, {"reason": ["list_head->prev", "fd->flags"], "call": "mq_getsetattr"}, {"reason": ["list_head->prev"], "call": "faccessat"}, {"reason": ["list_head->prev"], "call": "rmdir"}, {"reason": ["file->f_op", "list_head->prev"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["list_head->prev"], "call": "setgroups16"}, {"reason": ["file->f_op", "list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "fork"}, {"reason": ["list_head->prev"], "call": "get_mempolicy"}, {"reason": ["list_head->prev"], "call": "io_submit"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "get_robust_list"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["list_head->prev", "fd->flags", "mm_segment_t->seg", "task_struct->flags"], "call": "mq_timedsend"}, {"reason": ["list_head->prev"], "call": "sched_yield"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "sched_getscheduler"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "ptrace"}, {"reason": ["file->f_op", "list_head->prev"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["list_head->prev"], "call": "munlockall"}, {"reason": ["file->f_op", "list_head->prev"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["list_head->prev"], "call": "pkey_mprotect"}, {"reason": ["list_head->prev"], "call": "madvise"}, {"reason": ["list_head->prev", "fd->flags"], "call": "epoll_wait"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "sched_getattr"}, {"reason": ["list_head->prev"], "call": "fchownat"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "getrusage"}, {"reason": ["list_head->prev"], "call": "timerfd_settime"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "sched_setscheduler"}, {"reason": ["list_head->prev", "task_struct->flags"], "call": "setresuid"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "setitimer"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "ioprio_get"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "vfork"}, {"reason": ["list_head->prev", "task_struct->flags"], "call": "setuid"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["list_head->prev"], "call": "io_setup"}, {"reason": ["list_head->prev"], "call": "mprotect"}, {"reason": ["file->f_op", "list_head->prev"], "call": "mmap_pgoff"}, {"reason": ["list_head->prev"], "call": "mremap"}, {"reason": ["list_head->prev"], "call": "io_destroy"}, {"reason": ["list_head->prev"], "call": "mbind"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "prctl"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "move_pages"}, {"reason": ["list_head->prev"], "call": "timerfd_create"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["list_head->prev"], "call": "modify_ldt"}, {"reason": ["list_head->prev"], "call": "getgroups"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["list_head->prev"], "call": "dup2"}, {"reason": ["list_head->prev"], "call": "get_curr_temp"}, {"reason": ["list_head->prev"], "call": "msgsnd"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["list_head->prev"], "call": "munlock"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "setpriority"}, {"reason": ["list_head->prev"], "call": "inotify_init1"}, {"reason": ["list_head->prev"], "call": "mincore"}, {"reason": ["list_head->prev", "fd->flags"], "call": "mq_notify"}, {"reason": ["list_head->prev", "fd->flags"], "call": "sendfile"}, {"reason": ["list_head->prev"], "call": "timer_getoverrun"}, {"reason": ["list_head->prev"], "call": "kexec_load"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "clone"}, {"reason": ["file->f_op", "list_head->prev"], "call": "mq_open"}, {"reason": ["list_head->prev"], "call": "setgroups"}, {"reason": ["list_head->prev"], "call": "unlinkat"}, {"reason": ["list_head->prev", "mm_segment_t->seg", "task_struct->flags"], "call": "sched_getparam"}, {"reason": ["list_head->prev"], "call": "io_cancel"}, {"reason": ["file->f_op", "list_head->prev"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["list_head->prev"], "call": "finit_module"}, {"reason": ["list_head->prev", "fd->flags"], "call": "sendfile64"}, {"reason": ["list_head->prev"], "call": "mlockall"}], "removexattr": [{"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["path->dentry", "path->mnt"], "call": "getcwd"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["path->dentry", "path->mnt"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "mq_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "sendmsg": [{"reason": ["socket->file"], "call": "recvfrom"}, {"reason": ["socket->file"], "call": "sendto"}, {"reason": ["socket->file"], "call": "connect"}, {"reason": ["socket->file"], "call": "getsockname"}, {"reason": ["socket->file"], "call": "accept4"}, {"reason": ["socket->file"], "call": "getpeername"}, {"reason": ["socket->file"], "call": "setsockopt"}, {"reason": ["socket->file"], "call": "shutdown"}, {"reason": ["socket->file"], "call": "getsockopt"}, {"reason": ["socket->file"], "call": "listen"}, {"reason": ["socket->file"], "call": "recvmsg"}, {"reason": ["socket->file"], "call": "sendmmsg"}, {"reason": ["socket->file"], "call": "bind"}, {"reason": ["socket->file"], "call": "recvmmsg"}], "epoll_ctl": [{"reason": ["fd->flags", "list_head->next"], "call": "syncfs"}, {"reason": ["list_head->next"], "call": "keyctl"}, {"reason": ["list_head->next"], "call": "rt_sigtimedwait"}, {"reason": ["fd->flags", "list_head->next"], "call": "vmsplice"}, {"reason": ["list_head->next"], "call": "msgrcv"}, {"reason": ["file->f_op", "list_head->next"], "call": "eventfd2"}, {"reason": ["list_head->next"], "call": "mq_unlink"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["list_head->next"], "call": "kill"}, {"reason": ["file->f_op", "list_head->next"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags", "list_head->next"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["list_head->next"], "call": "timer_delete"}, {"reason": ["list_head->next"], "call": "sched_getaffinity"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["list_head->next"], "call": "sched_setparam"}, {"reason": ["fd->flags", "list_head->next"], "call": "fchmod"}, {"reason": ["list_head->next"], "call": "setgid"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["list_head->next"], "call": "pivot_root"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_op", "list_head->next"], "call": "memfd_create"}, {"reason": ["list_head->next"], "call": "ioprio_set"}, {"reason": ["list_head->next"], "call": "delete_module"}, {"reason": ["file->f_op", "list_head->next"], "call": "remap_file_pages"}, {"reason": ["file->f_op", "list_head->next"], "call": "dup3"}, {"reason": ["list_head->next"], "call": "readlinkat"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["list_head->next"], "call": "io_getevents"}, {"reason": ["list_head->next"], "call": "getppid"}, {"reason": ["fd->flags", "list_head->next"], "call": "fchown"}, {"reason": ["fd->flags", "list_head->next"], "call": "mq_timedreceive"}, {"reason": ["list_head->next"], "call": "capget"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["list_head->next"], "call": "sched_setaffinity"}, {"reason": ["list_head->next"], "call": "ustat"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags", "list_head->next"], "call": "bpf"}, {"reason": ["list_head->next"], "call": "unshare"}, {"reason": ["list_head->next"], "call": "signal"}, {"reason": ["list_head->next"], "call": "setreuid"}, {"reason": ["list_head->next"], "call": "semtimedop"}, {"reason": ["list_head->next"], "call": "umount"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["list_head->next"], "call": "timer_create"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["list_head->next"], "call": "mkdirat"}, {"reason": ["list_head->next"], "call": "sched_rr_get_interval"}, {"reason": ["file->f_op", "epitem->ws", "epoll_event->events", "list_head->next", "epitem->nwait"], "call": "epoll_create1"}, {"reason": ["list_head->next"], "call": "timerfd_gettime"}, {"reason": ["fd->flags", "list_head->next"], "call": "tee"}, {"reason": ["list_head->next"], "call": "semctl"}, {"reason": ["fd->flags", "list_head->next"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["file->f_op", "fd->flags", "list_head->next"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_op", "list_head->next"], "call": "openat"}, {"reason": ["list_head->next"], "call": "lookup_dcookie"}, {"reason": ["file->f_op", "list_head->next"], "call": "uselib"}, {"reason": ["list_head->next"], "call": "renameat2"}, {"reason": ["list_head->next"], "call": "rt_sigprocmask"}, {"reason": ["file->f_op", "fd->flags", "list_head->next"], "call": "accept4"}, {"reason": ["list_head->next"], "call": "msgctl"}, {"reason": ["list_head->next"], "call": "reboot"}, {"reason": ["list_head->next"], "call": "setsid"}, {"reason": ["list_head->next"], "call": "set_trip_temp"}, {"reason": ["list_head->next"], "call": "sigaltstack"}, {"reason": ["list_head->next"], "call": "sched_setattr"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags", "list_head->next"], "call": "inotify_rm_watch"}, {"reason": ["file->f_op", "list_head->next"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["list_head->next"], "call": "migrate_pages"}, {"reason": ["list_head->next"], "call": "getitimer"}, {"reason": ["list_head->next"], "call": "fchmodat"}, {"reason": ["list_head->next"], "call": "setpgid"}, {"reason": ["list_head->next"], "call": "init_module"}, {"reason": ["list_head->next"], "call": "setresgid"}, {"reason": ["list_head->next"], "call": "getcwd"}, {"reason": ["fd->flags", "list_head->next"], "call": "inotify_add_watch"}, {"reason": ["list_head->next"], "call": "get_trip_temp"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["list_head->next"], "call": "timer_settime"}, {"reason": ["list_head->next"], "call": "setregid"}, {"reason": ["fd->flags", "list_head->next"], "call": "splice"}, {"reason": ["fd->flags", "list_head->next"], "call": "ftruncate"}, {"reason": ["list_head->next"], "call": "timer_gettime"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["list_head->next"], "call": "getsid"}, {"reason": ["file->f_op", "list_head->next"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["list_head->next"], "call": "mknodat"}, {"reason": ["file->f_op", "list_head->next"], "call": "socket"}, {"reason": ["list_head->next"], "call": "symlinkat"}, {"reason": ["file->f_op", "list_head->next"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags", "list_head->next"], "call": "ioctl"}, {"reason": ["list_head->next"], "call": "prlimit64"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["file->f_op", "fd->flags", "list_head->next"], "call": "perf_event_open"}, {"reason": ["list_head->next"], "call": "linkat"}, {"reason": ["list_head->next"], "call": "getgroups16"}, {"reason": ["file->f_op", "list_head->next"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["list_head->next"], "call": "quotactl"}, {"reason": ["list_head->next"], "call": "rt_sigaction"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["list_head->next"], "call": "request_key"}, {"reason": ["list_head->next"], "call": "getpgid"}, {"reason": ["list_head->next"], "call": "brk"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_op", "list_head->next"], "call": "acct"}, {"reason": ["file->f_op", "list_head->next"], "call": "open"}, {"reason": ["list_head->next"], "call": "unlink"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["list_head->next"], "call": "exit_group"}, {"reason": ["list_head->next"], "call": "getpriority"}, {"reason": ["list_head->next"], "call": "sigaction"}, {"reason": ["fd->flags", "list_head->next"], "call": "mq_getsetattr"}, {"reason": ["list_head->next"], "call": "faccessat"}, {"reason": ["list_head->next"], "call": "rmdir"}, {"reason": ["file->f_op", "list_head->next"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["list_head->next"], "call": "setgroups16"}, {"reason": ["file->f_op", "list_head->next"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["list_head->next"], "call": "fork"}, {"reason": ["list_head->next"], "call": "get_mempolicy"}, {"reason": ["list_head->next"], "call": "io_submit"}, {"reason": ["list_head->next"], "call": "get_robust_list"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags", "list_head->next"], "call": "mq_timedsend"}, {"reason": ["list_head->next"], "call": "sched_yield"}, {"reason": ["list_head->next"], "call": "sched_getscheduler"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["list_head->next"], "call": "ptrace"}, {"reason": ["file->f_op", "list_head->next"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["list_head->next"], "call": "munlockall"}, {"reason": ["file->f_op", "list_head->next"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["list_head->next"], "call": "pkey_mprotect"}, {"reason": ["list_head->next"], "call": "madvise"}, {"reason": ["fd->flags", "list_head->next"], "call": "epoll_wait"}, {"reason": ["list_head->next"], "call": "sched_getattr"}, {"reason": ["list_head->next"], "call": "fchownat"}, {"reason": ["list_head->next"], "call": "getrusage"}, {"reason": ["list_head->next"], "call": "timerfd_settime"}, {"reason": ["list_head->next"], "call": "sched_setscheduler"}, {"reason": ["list_head->next"], "call": "setresuid"}, {"reason": ["list_head->next"], "call": "setitimer"}, {"reason": ["list_head->next"], "call": "ioprio_get"}, {"reason": ["list_head->next"], "call": "vfork"}, {"reason": ["list_head->next"], "call": "setuid"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["list_head->next"], "call": "io_setup"}, {"reason": ["list_head->next"], "call": "mprotect"}, {"reason": ["file->f_op", "list_head->next"], "call": "mmap_pgoff"}, {"reason": ["list_head->next"], "call": "mremap"}, {"reason": ["list_head->next"], "call": "io_destroy"}, {"reason": ["list_head->next"], "call": "mbind"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["list_head->next"], "call": "prctl"}, {"reason": ["list_head->next"], "call": "move_pages"}, {"reason": ["list_head->next"], "call": "timerfd_create"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["list_head->next"], "call": "modify_ldt"}, {"reason": ["list_head->next"], "call": "getgroups"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["list_head->next"], "call": "dup2"}, {"reason": ["list_head->next"], "call": "get_curr_temp"}, {"reason": ["list_head->next"], "call": "msgsnd"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["list_head->next"], "call": "munlock"}, {"reason": ["list_head->next"], "call": "setpriority"}, {"reason": ["list_head->next"], "call": "inotify_init1"}, {"reason": ["list_head->next"], "call": "mincore"}, {"reason": ["fd->flags", "list_head->next"], "call": "mq_notify"}, {"reason": ["fd->flags", "list_head->next"], "call": "sendfile"}, {"reason": ["list_head->next"], "call": "timer_getoverrun"}, {"reason": ["list_head->next"], "call": "kexec_load"}, {"reason": ["list_head->next"], "call": "clone"}, {"reason": ["file->f_op", "list_head->next"], "call": "mq_open"}, {"reason": ["list_head->next"], "call": "setgroups"}, {"reason": ["list_head->next"], "call": "unlinkat"}, {"reason": ["list_head->next"], "call": "sched_getparam"}, {"reason": ["list_head->next"], "call": "io_cancel"}, {"reason": ["file->f_op", "list_head->next"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["list_head->next"], "call": "finit_module"}, {"reason": ["fd->flags", "list_head->next"], "call": "sendfile64"}, {"reason": ["list_head->next"], "call": "mlockall"}], "rt_tgsigqueueinfo": [{"reason": ["siginfo->si_code"], "call": "rt_sigtimedwait"}, {"reason": ["siginfo->si_code"], "call": "kill"}, {"reason": ["siginfo->si_code"], "call": "timer_create"}, {"reason": ["siginfo->si_code"], "call": "rt_sigqueueinfo"}, {"reason": ["siginfo->si_code"], "call": "tgkill"}, {"reason": ["siginfo->si_code"], "call": "rt_sigreturn"}, {"reason": ["siginfo->si_code"], "call": "tkill"}], "pwritev64v2": [{"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_mode"], "call": "flock"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["file->f_mode"], "call": "accept4"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}], "splice": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags", "file->f_flags", "file->f_mode"], "call": "epoll_ctl"}, {"reason": ["fd->flags", "file->f_flags", "file->f_mode"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "openat"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "uselib"}, {"reason": ["fd->flags", "file->f_flags", "file->f_mode"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "socket"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags", "file->f_flags", "file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "acct"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags", "file->f_flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_flags", "file->f_mode"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "setxattr": [{"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["path->dentry", "path->mnt"], "call": "getcwd"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["path->dentry", "path->mnt"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "mq_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "symlinkat": [{"reason": ["filename->refcnt", "filename->name"], "call": "sysfs"}, {"reason": ["filename->refcnt", "filename->name"], "call": "mq_unlink"}, {"reason": ["filename->refcnt", "filename->name"], "call": "swapoff"}, {"reason": ["filename->refcnt", "filename->name"], "call": "openat"}, {"reason": ["filename->refcnt", "filename->name"], "call": "uselib"}, {"reason": ["filename->refcnt", "filename->name"], "call": "renameat2"}, {"reason": ["filename->refcnt", "filename->name"], "call": "quotactl"}, {"reason": ["filename->refcnt", "filename->name"], "call": "acct"}, {"reason": ["filename->refcnt", "filename->name"], "call": "open"}, {"reason": ["filename->refcnt", "filename->name"], "call": "unlink"}, {"reason": ["filename->refcnt", "filename->name"], "call": "rmdir"}, {"reason": ["filename->refcnt", "filename->name"], "call": "swapon"}, {"reason": ["filename->refcnt", "filename->name"], "call": "mq_open"}, {"reason": ["filename->refcnt", "filename->name"], "call": "unlinkat"}], "brk": [{"reason": ["mm_struct->brk", "mm_struct->start_brk", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->start_data"], "call": "swapoff"}, {"reason": ["vm_area_struct->vm_start", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->brk", "mm_struct->start_brk", "vm_area_struct->vm_flags", "mm_struct->start_data"], "call": "remap_file_pages"}, {"reason": ["mm_struct->brk", "mm_struct->start_brk", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->start_data"], "call": "io_getevents"}, {"reason": ["mm_struct->brk", "mm_struct->start_brk", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->start_data"], "call": "migrate_pages"}, {"reason": ["vm_area_struct->vm_start", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->brk", "mm_struct->start_brk", "vm_area_struct->vm_flags", "mm_struct->start_data"], "call": "shmdt"}, {"reason": ["vm_area_struct->vm_start", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->brk", "mm_struct->start_brk", "vm_area_struct->vm_flags", "mm_struct->start_data"], "call": "get_mempolicy"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "mm_struct->def_flags"], "call": "munlockall"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags"], "call": "pkey_mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags"], "call": "madvise"}, {"reason": ["mm_struct->brk", "mm_struct->start_brk", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->start_data"], "call": "getrusage"}, {"reason": ["mm_struct->brk", "mm_struct->start_brk", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->start_data"], "call": "io_setup"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags"], "call": "mprotect"}, {"reason": ["vm_area_struct->vm_start", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->brk", "mm_struct->start_brk", "vm_area_struct->vm_flags", "mm_struct->start_data"], "call": "mremap"}, {"reason": ["mm_struct->brk", "mm_struct->start_brk", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->start_data"], "call": "io_destroy"}, {"reason": ["mm_struct->brk", "mm_struct->start_brk", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->start_data"], "call": "mbind"}, {"reason": ["vm_area_struct->vm_start", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->brk", "mm_struct->start_brk", "vm_area_struct->vm_flags", "mm_struct->start_data"], "call": "prctl"}, {"reason": ["mm_struct->brk", "mm_struct->start_brk", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->start_data"], "call": "move_pages"}, {"reason": ["mm_struct->brk", "mm_struct->start_brk", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->start_data"], "call": "modify_ldt"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags"], "call": "munlock"}, {"reason": ["vm_area_struct->vm_start", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->brk", "mm_struct->start_brk", "vm_area_struct->vm_flags", "mm_struct->start_data"], "call": "mincore"}, {"reason": ["mm_struct->brk", "mm_struct->start_brk", "mm_struct->def_flags", "mm_struct->end_data", "mm_struct->start_data"], "call": "io_cancel"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "mm_struct->def_flags"], "call": "mlockall"}], "fsetxattr": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "acct": [{"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_mode"], "call": "flock"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["file->f_mode"], "call": "accept4"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}], "poll": [{"reason": ["poll_list->len"], "call": "ppoll"}], "clock_settime": [{"reason": ["k_clock->clock_set"], "call": "clock_getres"}, {"reason": ["k_clock->clock_set"], "call": "timer_delete"}, {"reason": ["k_clock->clock_set"], "call": "timer_create"}, {"reason": ["k_clock->clock_set"], "call": "clock_gettime"}, {"reason": ["k_clock->clock_set"], "call": "timer_settime"}, {"reason": ["k_clock->clock_set"], "call": "timer_gettime"}, {"reason": ["k_clock->clock_set"], "call": "clock_nanosleep"}, {"reason": ["k_clock->clock_set"], "call": "clock_adjtime"}], "select": [{"reason": ["task_struct->personality"], "call": "keyctl"}, {"reason": ["task_struct->personality", "timespec->tv_sec", "timespec->tv_nsec"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->personality"], "call": "msgrcv"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_unlink"}, {"reason": ["task_struct->personality"], "call": "kill"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapoff"}, {"reason": ["task_struct->personality"], "call": "sched_getaffinity"}, {"reason": ["task_struct->personality"], "call": "sched_setparam"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmod"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "memfd_create"}, {"reason": ["task_struct->personality"], "call": "ioprio_set"}, {"reason": ["task_struct->personality"], "call": "personality"}, {"reason": ["files_struct->fdt"], "call": "dup3"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "readlinkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "io_getevents"}, {"reason": ["task_struct->personality"], "call": "getppid"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchown"}, {"reason": ["task_struct->personality", "timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedreceive"}, {"reason": ["task_struct->personality"], "call": "capget"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "utime"}, {"reason": ["task_struct->personality"], "call": "sched_setaffinity"}, {"reason": ["files_struct->fdt"], "call": "unshare"}, {"reason": ["task_struct->personality"], "call": "signal"}, {"reason": ["task_struct->personality", "timespec->tv_sec", "timespec->tv_nsec"], "call": "semtimedop"}, {"reason": ["task_struct->personality"], "call": "umount"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "settimeofday"}, {"reason": ["task_struct->personality", "timespec->tv_sec", "timespec->tv_nsec"], "call": "sched_rr_get_interval"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_gettime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "pselect6"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "uselib"}, {"reason": ["task_struct->personality"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->personality"], "call": "setsid"}, {"reason": ["task_struct->personality"], "call": "sigaltstack"}, {"reason": ["task_struct->personality"], "call": "sched_setattr"}, {"reason": ["task_struct->personality"], "call": "migrate_pages"}, {"reason": ["task_struct->personality"], "call": "getitimer"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmodat"}, {"reason": ["task_struct->personality"], "call": "setpgid"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "inotify_add_watch"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_settime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ftruncate"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_gettime"}, {"reason": ["task_struct->personality"], "call": "getsid"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ioctl"}, {"reason": ["task_struct->personality"], "call": "prlimit64"}, {"reason": ["task_struct->personality"], "call": "perf_event_open"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "linkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "stime"}, {"reason": ["task_struct->personality"], "call": "rt_sigaction"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futimesat"}, {"reason": ["task_struct->personality"], "call": "getpgid"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "poll"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlink"}, {"reason": ["task_struct->personality"], "call": "getpriority"}, {"reason": ["task_struct->personality"], "call": "sigaction"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "nanosleep"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_getsetattr"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "faccessat"}, {"reason": ["task_struct->personality"], "call": "setns"}, {"reason": ["task_struct->personality"], "call": "fork"}, {"reason": ["task_struct->personality"], "call": "get_robust_list"}, {"reason": ["task_struct->personality", "timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedsend"}, {"reason": ["task_struct->personality"], "call": "sched_getscheduler"}, {"reason": ["task_struct->personality"], "call": "ptrace"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapon"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "epoll_wait"}, {"reason": ["task_struct->personality"], "call": "sched_getattr"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchownat"}, {"reason": ["task_struct->personality"], "call": "getrusage"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fstat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_settime"}, {"reason": ["task_struct->personality"], "call": "sched_setscheduler"}, {"reason": ["task_struct->personality"], "call": "setitimer"}, {"reason": ["task_struct->personality"], "call": "ioprio_get"}, {"reason": ["task_struct->personality"], "call": "vfork"}, {"reason": ["task_struct->personality"], "call": "prctl"}, {"reason": ["task_struct->personality"], "call": "move_pages"}, {"reason": ["files_struct->fdt"], "call": "dup2"}, {"reason": ["task_struct->personality"], "call": "setpriority"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_notify"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "newfstat"}, {"reason": ["task_struct->personality"], "call": "clone"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "clock_nanosleep"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlinkat"}, {"reason": ["task_struct->personality"], "call": "sched_getparam"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futex"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "recvmmsg"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile64"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ppoll"}], "unlink": [{"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["dentry->d_inode"], "call": "mq_unlink"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["dentry->d_inode", "path->dentry", "path->mnt"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["dentry->d_inode"], "call": "mkdirat"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["dentry->d_inode"], "call": "renameat2"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["dentry->d_inode", "path->dentry", "path->mnt"], "call": "getcwd"}, {"reason": ["dentry->d_inode"], "call": "ftruncate"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["dentry->d_inode"], "call": "mknodat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["dentry->d_inode"], "call": "symlinkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["dentry->d_inode"], "call": "linkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["path->dentry", "path->mnt"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["dentry->d_inode"], "call": "rmdir"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["dentry->d_inode", "path->dentry", "path->mnt"], "call": "mq_open"}, {"reason": ["dentry->d_inode"], "call": "unlinkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "getsockopt": [{"reason": ["proto_ops->compat_getsockopt"], "call": "accept4"}], "getpriority": [{"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "signal"}, {"reason": ["cred->uid"], "call": "setreuid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->uid"], "call": "setresuid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "vfork"}, {"reason": ["cred->uid"], "call": "setuid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_getparam"}], "listxattr": [{"reason": ["path->dentry"], "call": "eventfd2"}, {"reason": ["path->dentry"], "call": "swapoff"}, {"reason": ["path->dentry"], "call": "pivot_root"}, {"reason": ["path->dentry"], "call": "memfd_create"}, {"reason": ["path->dentry"], "call": "remap_file_pages"}, {"reason": ["path->dentry"], "call": "dup3"}, {"reason": ["path->dentry"], "call": "unshare"}, {"reason": ["path->dentry"], "call": "epoll_create1"}, {"reason": ["path->dentry"], "call": "epoll_ctl"}, {"reason": ["path->dentry"], "call": "flock"}, {"reason": ["path->dentry"], "call": "openat"}, {"reason": ["path->dentry"], "call": "lookup_dcookie"}, {"reason": ["path->dentry"], "call": "uselib"}, {"reason": ["path->dentry"], "call": "accept4"}, {"reason": ["path->dentry"], "call": "socketpair"}, {"reason": ["path->dentry"], "call": "getcwd"}, {"reason": ["path->dentry"], "call": "shmat"}, {"reason": ["path->dentry"], "call": "socket"}, {"reason": ["path->dentry"], "call": "pipe2"}, {"reason": ["path->dentry"], "call": "perf_event_open"}, {"reason": ["path->dentry"], "call": "shmdt"}, {"reason": ["path->dentry"], "call": "quotactl"}, {"reason": ["path->dentry"], "call": "acct"}, {"reason": ["path->dentry"], "call": "open"}, {"reason": ["path->dentry"], "call": "dup"}, {"reason": ["path->dentry"], "call": "setns"}, {"reason": ["path->dentry"], "call": "shmctl"}, {"reason": ["path->dentry"], "call": "swapon"}, {"reason": ["path->dentry"], "call": "mmap_pgoff"}, {"reason": ["path->dentry"], "call": "mq_open"}, {"reason": ["path->dentry"], "call": "open_by_handle_at"}], "sigaction": [{"reason": ["mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigtimedwait"}, {"reason": ["mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["mm_segment_t->seg"], "call": "kill"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["mm_segment_t->seg"], "call": "getppid"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg"], "call": "capget"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "signal"}, {"reason": ["mm_segment_t->seg"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg"], "call": "umount"}, {"reason": ["mm_segment_t->seg"], "call": "sched_rr_get_interval"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["mm_segment_t->seg"], "call": "setsid"}, {"reason": ["mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setattr"}, {"reason": ["mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["mm_segment_t->seg"], "call": "getsid"}, {"reason": ["mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["mm_segment_t->seg"], "call": "perf_event_open"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg"], "call": "setns"}, {"reason": ["mm_segment_t->seg"], "call": "fork"}, {"reason": ["mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["mm_segment_t->seg"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg"], "call": "vfork"}, {"reason": ["mm_segment_t->seg"], "call": "prctl"}, {"reason": ["mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["mm_segment_t->seg"], "call": "clone"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getparam"}], "nanosleep": [{"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "rt_sigtimedwait"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_unlink"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapoff"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmod"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "memfd_create"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "readlinkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "io_getevents"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchown"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedreceive"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "utime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "semtimedop"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "settimeofday"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sched_rr_get_interval"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_gettime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "pselect6"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "uselib"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmodat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "inotify_add_watch"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_settime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ftruncate"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_gettime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ioctl"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "linkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "stime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futimesat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "poll"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "select"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlink"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_getsetattr"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "faccessat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedsend"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapon"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "epoll_wait"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchownat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fstat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_settime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_notify"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "newfstat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "clock_nanosleep"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlinkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futex"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "recvmmsg"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile64"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ppoll"}], "quotactl": [{"reason": ["super_block->s_qcop", "super_block->s_quota_types", "super_block->s_flags"], "call": "syncfs"}, {"reason": ["filename->name"], "call": "sysfs"}, {"reason": ["filename->name"], "call": "mq_unlink"}, {"reason": ["filename->name"], "call": "swapoff"}, {"reason": ["super_block->s_qcop", "super_block->s_quota_types", "super_block->s_flags"], "call": "ustat"}, {"reason": ["super_block->s_qcop", "super_block->s_quota_types", "super_block->s_flags"], "call": "umount"}, {"reason": ["filename->name"], "call": "openat"}, {"reason": ["filename->name"], "call": "uselib"}, {"reason": ["filename->name"], "call": "renameat2"}, {"reason": ["filename->name"], "call": "symlinkat"}, {"reason": ["filename->name"], "call": "acct"}, {"reason": ["filename->name"], "call": "open"}, {"reason": ["filename->name"], "call": "unlink"}, {"reason": ["filename->name"], "call": "rmdir"}, {"reason": ["super_block->s_qcop", "filename->name", "super_block->s_quota_types", "super_block->s_flags"], "call": "swapon"}, {"reason": ["filename->name"], "call": "mq_open"}, {"reason": ["filename->name"], "call": "unlinkat"}], "mq_getsetattr": [{"reason": ["file->f_op"], "call": "eventfd2"}, {"reason": ["file->f_op"], "call": "swapoff"}, {"reason": ["file->f_op"], "call": "memfd_create"}, {"reason": ["file->f_op"], "call": "remap_file_pages"}, {"reason": ["file->f_op"], "call": "dup3"}, {"reason": ["mq_attr->mq_flags"], "call": "mq_timedreceive"}, {"reason": ["file->f_op"], "call": "epoll_create1"}, {"reason": ["file->f_op"], "call": "epoll_ctl"}, {"reason": ["file->f_op"], "call": "flock"}, {"reason": ["file->f_op"], "call": "openat"}, {"reason": ["file->f_op"], "call": "uselib"}, {"reason": ["file->f_op"], "call": "accept4"}, {"reason": ["file->f_op"], "call": "socketpair"}, {"reason": ["file->f_op"], "call": "shmat"}, {"reason": ["file->f_op"], "call": "socket"}, {"reason": ["file->f_op"], "call": "pipe2"}, {"reason": ["file->f_op"], "call": "perf_event_open"}, {"reason": ["file->f_op"], "call": "shmdt"}, {"reason": ["file->f_op"], "call": "acct"}, {"reason": ["file->f_op"], "call": "open"}, {"reason": ["file->f_op"], "call": "dup"}, {"reason": ["file->f_op"], "call": "setns"}, {"reason": ["mq_attr->mq_flags"], "call": "mq_timedsend"}, {"reason": ["file->f_op"], "call": "shmctl"}, {"reason": ["file->f_op"], "call": "swapon"}, {"reason": ["file->f_op"], "call": "mmap_pgoff"}, {"reason": ["mq_attr->mq_flags"], "call": "mq_notify"}, {"reason": ["file->f_op", "mq_attr->mq_flags"], "call": "mq_open"}, {"reason": ["file->f_op"], "call": "open_by_handle_at"}], "faccessat": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["path->mnt"], "call": "eventfd2"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["path->mnt"], "call": "swapoff"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["path->mnt"], "call": "pivot_root"}, {"reason": ["path->mnt"], "call": "memfd_create"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->mnt"], "call": "dup3"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["path->mnt"], "call": "unshare"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["cred->uid"], "call": "setreuid"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["path->mnt"], "call": "epoll_create1"}, {"reason": ["path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->mnt"], "call": "flock"}, {"reason": ["path->mnt"], "call": "openat"}, {"reason": ["path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->mnt"], "call": "uselib"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["path->mnt"], "call": "accept4"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["path->mnt"], "call": "socketpair"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["path->mnt"], "call": "getcwd"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["path->mnt"], "call": "shmat"}, {"reason": ["path->mnt"], "call": "socket"}, {"reason": ["path->mnt"], "call": "pipe2"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred", "path->mnt"], "call": "perf_event_open"}, {"reason": ["path->mnt"], "call": "shmdt"}, {"reason": ["path->mnt"], "call": "quotactl"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["path->mnt"], "call": "acct"}, {"reason": ["path->mnt"], "call": "open"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["path->mnt"], "call": "dup"}, {"reason": ["task_struct->cred", "path->mnt"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["path->mnt"], "call": "shmctl"}, {"reason": ["path->mnt"], "call": "swapon"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->uid"], "call": "setresuid"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["cred->uid"], "call": "setuid"}, {"reason": ["path->mnt"], "call": "mmap_pgoff"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["path->mnt"], "call": "mq_open"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}, {"reason": ["path->mnt"], "call": "open_by_handle_at"}], "rmdir": [{"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["dentry->d_inode"], "call": "mq_unlink"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["dentry->d_inode", "path->dentry", "path->mnt"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["dentry->d_inode"], "call": "mkdirat"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["dentry->d_inode"], "call": "renameat2"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["dentry->d_inode", "path->dentry", "path->mnt"], "call": "getcwd"}, {"reason": ["dentry->d_inode"], "call": "ftruncate"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["dentry->d_inode"], "call": "mknodat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["dentry->d_inode"], "call": "symlinkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["dentry->d_inode"], "call": "linkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["path->dentry", "path->mnt"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["dentry->d_inode"], "call": "unlink"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["dentry->d_inode", "path->dentry", "path->mnt"], "call": "mq_open"}, {"reason": ["dentry->d_inode"], "call": "unlinkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "fallocate": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "setgroups16": [{"reason": ["group_info->ngroups"], "call": "setgroups"}], "getdents64": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigtimedwait"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["mm_segment_t->seg"], "call": "kill"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["mm_segment_t->seg"], "call": "getppid"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg", "fd->flags"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg"], "call": "capget"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["mm_segment_t->seg"], "call": "signal"}, {"reason": ["mm_segment_t->seg"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg"], "call": "umount"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["mm_segment_t->seg"], "call": "sched_rr_get_interval"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["mm_segment_t->seg"], "call": "setsid"}, {"reason": ["mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setattr"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["mm_segment_t->seg"], "call": "getsid"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["mm_segment_t->seg", "fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["mm_segment_t->seg"], "call": "setns"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["mm_segment_t->seg"], "call": "fork"}, {"reason": ["mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["mm_segment_t->seg", "fd->flags"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg"], "call": "vfork"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["mm_segment_t->seg"], "call": "prctl"}, {"reason": ["mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["mm_segment_t->seg"], "call": "clone"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getparam"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "io_cancel": [{"reason": ["mm_struct->ioctx_table"], "call": "swapoff"}, {"reason": ["mm_struct->ioctx_table"], "call": "remap_file_pages"}, {"reason": ["kioctx_table->nr", "kioctx->user_id", "mm_struct->ioctx_table"], "call": "io_getevents"}, {"reason": ["mm_struct->ioctx_table"], "call": "migrate_pages"}, {"reason": ["mm_struct->ioctx_table"], "call": "shmdt"}, {"reason": ["mm_struct->ioctx_table"], "call": "brk"}, {"reason": ["mm_struct->ioctx_table"], "call": "get_mempolicy"}, {"reason": ["kioctx->user_id"], "call": "io_submit"}, {"reason": ["mm_struct->ioctx_table"], "call": "getrusage"}, {"reason": ["kioctx_table->nr", "kioctx->user_id", "mm_struct->ioctx_table"], "call": "io_setup"}, {"reason": ["mm_struct->ioctx_table"], "call": "mremap"}, {"reason": ["kioctx_table->nr", "kioctx->user_id", "mm_struct->ioctx_table"], "call": "io_destroy"}, {"reason": ["mm_struct->ioctx_table"], "call": "mbind"}, {"reason": ["mm_struct->ioctx_table"], "call": "prctl"}, {"reason": ["mm_struct->ioctx_table"], "call": "move_pages"}, {"reason": ["mm_struct->ioctx_table"], "call": "modify_ldt"}, {"reason": ["mm_struct->ioctx_table"], "call": "mincore"}], "get_mempolicy": [{"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "keyctl"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "msgrcv"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "kill"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "sched_getaffinity"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "sched_setparam"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "ioprio_set"}, {"reason": ["vm_area_struct->vm_ops"], "call": "remap_file_pages"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "getppid"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "mq_timedreceive"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "capget"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "sched_setaffinity"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "signal"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "semtimedop"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "umount"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "setsid"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "sigaltstack"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "sched_setattr"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "migrate_pages"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "getitimer"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "setpgid"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "getsid"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "prlimit64"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev", "mempolicy->mode"], "call": "set_mempolicy"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "perf_event_open"}, {"reason": ["vm_area_struct->vm_ops"], "call": "shmdt"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "rt_sigaction"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "getpgid"}, {"reason": ["vm_area_struct->vm_ops"], "call": "brk"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "getpriority"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "sigaction"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "setns"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "fork"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "get_robust_list"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "mq_timedsend"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "sched_getscheduler"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "ptrace"}, {"reason": ["vm_area_struct->vm_ops"], "call": "munlockall"}, {"reason": ["vm_area_struct->vm_ops"], "call": "pkey_mprotect"}, {"reason": ["vm_area_struct->vm_ops"], "call": "madvise"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "sched_getattr"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "getrusage"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "sched_setscheduler"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "setitimer"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "ioprio_get"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "vfork"}, {"reason": ["vm_area_struct->vm_ops"], "call": "mprotect"}, {"reason": ["vm_area_struct->vm_ops"], "call": "mremap"}, {"reason": ["mempolicy->mode"], "call": "mbind"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev", "vm_area_struct->vm_ops"], "call": "prctl"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "move_pages"}, {"reason": ["vm_area_struct->vm_ops"], "call": "munlock"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "setpriority"}, {"reason": ["vm_area_struct->vm_ops"], "call": "mincore"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "clone"}, {"reason": ["task_struct->mempolicy", "task_struct->il_prev"], "call": "sched_getparam"}, {"reason": ["vm_area_struct->vm_ops"], "call": "mlockall"}], "io_submit": [{"reason": ["mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigtimedwait"}, {"reason": ["mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["mm_segment_t->seg"], "call": "kill"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["mm_segment_t->seg"], "call": "getppid"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg"], "call": "capget"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["mm_segment_t->seg"], "call": "signal"}, {"reason": ["mm_segment_t->seg"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg"], "call": "umount"}, {"reason": ["mm_segment_t->seg"], "call": "sched_rr_get_interval"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["mm_segment_t->seg"], "call": "setsid"}, {"reason": ["mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setattr"}, {"reason": ["mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["mm_segment_t->seg"], "call": "getsid"}, {"reason": ["mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["mm_segment_t->seg"], "call": "perf_event_open"}, {"reason": ["mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["mm_segment_t->seg"], "call": "setns"}, {"reason": ["mm_segment_t->seg"], "call": "fork"}, {"reason": ["mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["mm_segment_t->seg"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg"], "call": "vfork"}, {"reason": ["mm_segment_t->seg"], "call": "prctl"}, {"reason": ["mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["mm_segment_t->seg"], "call": "clone"}, {"reason": ["mm_segment_t->seg"], "call": "sched_getparam"}], "inotify_init1": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["fsnotify_group->overflow_event", "inotify_group_private_data->ucounts"], "call": "inotify_rm_watch"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["fsnotify_group->overflow_event", "inotify_group_private_data->ucounts"], "call": "inotify_add_watch"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "futimesat": [{"reason": ["timespec->tv_nsec"], "call": "rt_sigtimedwait"}, {"reason": ["timespec->tv_nsec"], "call": "mq_unlink"}, {"reason": ["timespec->tv_nsec"], "call": "swapoff"}, {"reason": ["timespec->tv_nsec"], "call": "fchmod"}, {"reason": ["timespec->tv_nsec"], "call": "memfd_create"}, {"reason": ["timespec->tv_nsec"], "call": "readlinkat"}, {"reason": ["timespec->tv_nsec"], "call": "io_getevents"}, {"reason": ["timespec->tv_nsec"], "call": "fchown"}, {"reason": ["timeval->tv_usec"], "call": "waitid"}, {"reason": ["timespec->tv_nsec"], "call": "mq_timedreceive"}, {"reason": ["timespec->tv_nsec"], "call": "utime"}, {"reason": ["timespec->tv_nsec"], "call": "semtimedop"}, {"reason": ["timeval->tv_usec", "timespec->tv_nsec"], "call": "settimeofday"}, {"reason": ["timespec->tv_nsec"], "call": "sched_rr_get_interval"}, {"reason": ["timespec->tv_nsec"], "call": "timerfd_gettime"}, {"reason": ["timeval->tv_usec"], "call": "adjtimex"}, {"reason": ["timespec->tv_nsec"], "call": "pselect6"}, {"reason": ["timespec->tv_nsec"], "call": "uselib"}, {"reason": ["timeval->tv_usec"], "call": "getitimer"}, {"reason": ["timespec->tv_nsec"], "call": "fchmodat"}, {"reason": ["timespec->tv_nsec"], "call": "inotify_add_watch"}, {"reason": ["timespec->tv_nsec"], "call": "timer_settime"}, {"reason": ["timespec->tv_nsec"], "call": "ftruncate"}, {"reason": ["timespec->tv_nsec"], "call": "timer_gettime"}, {"reason": ["timespec->tv_nsec"], "call": "ioctl"}, {"reason": ["timespec->tv_nsec"], "call": "linkat"}, {"reason": ["timespec->tv_nsec"], "call": "stime"}, {"reason": ["timespec->tv_nsec"], "call": "poll"}, {"reason": ["timeval->tv_usec", "timespec->tv_nsec"], "call": "select"}, {"reason": ["timespec->tv_nsec"], "call": "unlink"}, {"reason": ["timespec->tv_nsec"], "call": "nanosleep"}, {"reason": ["timespec->tv_nsec"], "call": "mq_getsetattr"}, {"reason": ["timespec->tv_nsec"], "call": "faccessat"}, {"reason": ["timespec->tv_nsec"], "call": "mq_timedsend"}, {"reason": ["timespec->tv_nsec"], "call": "swapon"}, {"reason": ["timeval->tv_usec"], "call": "wait4"}, {"reason": ["timespec->tv_nsec"], "call": "epoll_wait"}, {"reason": ["timespec->tv_nsec"], "call": "fchownat"}, {"reason": ["timeval->tv_usec"], "call": "getrusage"}, {"reason": ["timespec->tv_nsec"], "call": "fstat"}, {"reason": ["timespec->tv_nsec"], "call": "timerfd_settime"}, {"reason": ["timeval->tv_usec"], "call": "setitimer"}, {"reason": ["timespec->tv_nsec"], "call": "mq_notify"}, {"reason": ["timespec->tv_nsec"], "call": "sendfile"}, {"reason": ["timespec->tv_nsec"], "call": "newfstat"}, {"reason": ["timespec->tv_nsec"], "call": "clock_nanosleep"}, {"reason": ["timespec->tv_nsec"], "call": "unlinkat"}, {"reason": ["timeval->tv_usec"], "call": "clock_adjtime"}, {"reason": ["timeval->tv_usec"], "call": "alarm"}, {"reason": ["timespec->tv_nsec"], "call": "futex"}, {"reason": ["timespec->tv_nsec"], "call": "recvmmsg"}, {"reason": ["timespec->tv_nsec"], "call": "sendfile64"}, {"reason": ["timeval->tv_usec", "timespec->tv_nsec"], "call": "ppoll"}], "mq_timedsend": [{"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "dup3"}, {"reason": ["mqueue_inode_info->node_cache", "mq_attr->mq_curmsgs", "mq_attr->mq_maxmsg", "mq_attr->mq_msgsize"], "call": "mq_timedreceive"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "flock"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "openat"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "uselib"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "accept4"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "shmat"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "socket"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "acct"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "open"}, {"reason": ["mqueue_inode_info->node_cache", "mq_attr->mq_curmsgs", "mq_attr->mq_maxmsg", "file->f_flags", "mq_attr->mq_msgsize"], "call": "mq_getsetattr"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "dup"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "setns"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "swapon"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["mqueue_inode_info->node_cache", "mq_attr->mq_curmsgs", "mq_attr->mq_maxmsg", "mq_attr->mq_msgsize"], "call": "mq_notify"}, {"reason": ["mq_attr->mq_curmsgs", "file->f_op", "mq_attr->mq_maxmsg", "file->f_mode", "file->f_flags", "mq_attr->mq_msgsize"], "call": "mq_open"}, {"reason": ["file->f_op", "file->f_flags", "file->f_mode"], "call": "open_by_handle_at"}], "getresgid16": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "sched_getscheduler": [{"reason": ["task_struct->sched_reset_on_fork"], "call": "keyctl"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "msgrcv"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "kill"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "sched_getaffinity"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "sched_setparam"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "ioprio_set"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "getppid"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "mq_timedreceive"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "capget"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "sched_setaffinity"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "signal"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "semtimedop"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "umount"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "setsid"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "sigaltstack"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "sched_setattr"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "migrate_pages"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "getitimer"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "setpgid"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "getsid"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "prlimit64"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "perf_event_open"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "rt_sigaction"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "getpgid"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "getpriority"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "sigaction"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "setns"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "fork"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "get_robust_list"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "mq_timedsend"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "ptrace"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "sched_getattr"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "getrusage"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "sched_setscheduler"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "setitimer"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "ioprio_get"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "vfork"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "prctl"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "move_pages"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "setpriority"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "clone"}, {"reason": ["task_struct->sched_reset_on_fork"], "call": "sched_getparam"}], "fgetxattr": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "ptrace": [{"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "keyctl"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "msgrcv"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "kill"}, {"reason": ["task_struct->state"], "call": "pause"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "sched_getaffinity"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "sched_setparam"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "ioprio_set"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "getppid"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "mq_timedreceive"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "capget"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "sched_setaffinity"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "signal"}, {"reason": ["task_struct->flags"], "call": "setreuid"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "semtimedop"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "umount"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "setsid"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "sigaltstack"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "sched_setattr"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "migrate_pages"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "getitimer"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "setpgid"}, {"reason": ["task_struct->state"], "call": "rt_sigsuspend"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "getsid"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "prlimit64"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "perf_event_open"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "rt_sigaction"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "getpgid"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "getpriority"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "sigaction"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "setns"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "fork"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "get_robust_list"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "mq_timedsend"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "sched_getscheduler"}, {"reason": ["task_struct->state"], "call": "epoll_wait"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "sched_getattr"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "getrusage"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "sched_setscheduler"}, {"reason": ["task_struct->flags"], "call": "setresuid"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "setitimer"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "ioprio_get"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "vfork"}, {"reason": ["task_struct->flags"], "call": "setuid"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "prctl"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "move_pages"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "setpriority"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "clone"}, {"reason": ["task_struct->state"], "call": "sigsuspend"}, {"reason": ["task_struct->exit_state", "task_struct->parent", "task_struct->state", "task_struct->real_parent", "task_struct->ptrace", "task_struct->flags"], "call": "sched_getparam"}], "shmctl": [{"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["kern_ipc_perm->mode", "kern_ipc_perm->deleted", "mm_segment_t->seg", "ipc_namespace->user_ns", "task_struct->cred"], "call": "msgrcv"}, {"reason": ["file->f_op"], "call": "eventfd2"}, {"reason": ["ipc_namespace->user_ns"], "call": "mq_unlink"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "kill"}, {"reason": ["file->f_op"], "call": "swapoff"}, {"reason": ["ipc_namespace->user_ns"], "call": "msgget"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "sched_setparam"}, {"reason": ["file->f_op"], "call": "memfd_create"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["file->f_op"], "call": "remap_file_pages"}, {"reason": ["file->f_op"], "call": "dup3"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "getppid"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "capget"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "signal"}, {"reason": ["kern_ipc_perm->mode", "kern_ipc_perm->deleted", "mm_segment_t->seg", "ipc_namespace->user_ns", "task_struct->cred"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "umount"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["file->f_op"], "call": "epoll_create1"}, {"reason": ["kern_ipc_perm->mode", "kern_ipc_perm->deleted", "ipc_namespace->user_ns"], "call": "semctl"}, {"reason": ["file->f_op"], "call": "epoll_ctl"}, {"reason": ["file->f_op"], "call": "flock"}, {"reason": ["file->f_op"], "call": "openat"}, {"reason": ["ipc_namespace->user_ns"], "call": "shmget"}, {"reason": ["file->f_op"], "call": "uselib"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["file->f_op"], "call": "accept4"}, {"reason": ["kern_ipc_perm->mode", "kern_ipc_perm->deleted", "ipc_namespace->user_ns"], "call": "msgctl"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "setsid"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "sched_setattr"}, {"reason": ["file->f_op"], "call": "socketpair"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "setpgid"}, {"reason": ["ipc_namespace->user_ns"], "call": "semget"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "getsid"}, {"reason": ["file->f_op", "kern_ipc_perm->deleted", "ipc_namespace->user_ns", "kern_ipc_perm->mode"], "call": "shmat"}, {"reason": ["file->f_op"], "call": "socket"}, {"reason": ["file->f_op"], "call": "pipe2"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["file->f_op", "mm_segment_t->seg", "task_struct->cred"], "call": "perf_event_open"}, {"reason": ["file->f_op"], "call": "shmdt"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "getpgid"}, {"reason": ["file->f_op"], "call": "acct"}, {"reason": ["file->f_op"], "call": "open"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "sigaction"}, {"reason": ["file->f_op"], "call": "dup"}, {"reason": ["file->f_op", "mm_segment_t->seg", "task_struct->cred", "ipc_namespace->user_ns"], "call": "setns"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "fork"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "get_robust_list"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "ptrace"}, {"reason": ["file->f_op"], "call": "swapon"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "vfork"}, {"reason": ["file->f_op"], "call": "mmap_pgoff"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "prctl"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "move_pages"}, {"reason": ["kern_ipc_perm->mode", "kern_ipc_perm->deleted", "ipc_namespace->user_ns"], "call": "msgsnd"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "setpriority"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "clone"}, {"reason": ["file->f_op", "ipc_namespace->user_ns"], "call": "mq_open"}, {"reason": ["mm_segment_t->seg", "task_struct->cred"], "call": "sched_getparam"}, {"reason": ["file->f_op"], "call": "open_by_handle_at"}], "fcntl64": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags", "file->f_mode"], "call": "epoll_ctl"}, {"reason": ["fd->flags", "file->f_mode"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["fd->flags", "file->f_mode"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["fd->flags", "flock->l_len", "flock->l_start"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags", "file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "munlockall": [{"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "remap_file_pages"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "shmdt"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "brk"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "get_mempolicy"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "pkey_mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "madvise"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mremap"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "prctl"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "munlock"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mincore"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mlockall"}], "swapon": [{"reason": ["inode->i_flags"], "call": "mq_unlink"}, {"reason": ["inode->i_flags", "swap_info_struct->bdev", "swap_info_struct->type", "swap_info_struct->percpu_cluster", "swap_info_struct->flags"], "call": "swapoff"}, {"reason": ["inode->i_flags"], "call": "fchmod"}, {"reason": ["inode->i_flags"], "call": "memfd_create"}, {"reason": ["inode->i_flags"], "call": "readlinkat"}, {"reason": ["inode->i_flags"], "call": "fchown"}, {"reason": ["inode->i_flags"], "call": "mq_timedreceive"}, {"reason": ["inode->i_flags"], "call": "uselib"}, {"reason": ["inode->i_flags"], "call": "fchmodat"}, {"reason": ["inode->i_flags"], "call": "inotify_add_watch"}, {"reason": ["inode->i_flags"], "call": "ftruncate"}, {"reason": ["inode->i_flags"], "call": "ioctl"}, {"reason": ["inode->i_flags"], "call": "linkat"}, {"reason": ["inode->i_flags"], "call": "unlink"}, {"reason": ["inode->i_flags"], "call": "mq_getsetattr"}, {"reason": ["inode->i_flags"], "call": "faccessat"}, {"reason": ["inode->i_flags"], "call": "mq_timedsend"}, {"reason": ["inode->i_flags"], "call": "fchownat"}, {"reason": ["inode->i_flags"], "call": "mq_notify"}, {"reason": ["inode->i_flags"], "call": "sendfile"}, {"reason": ["inode->i_flags"], "call": "unlinkat"}, {"reason": ["inode->i_flags"], "call": "sendfile64"}], "pkey_mprotect": [{"reason": ["task_struct->personality", "task_struct->mm"], "call": "keyctl"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "msgrcv"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "kill"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_getaffinity"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_setparam"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "ioprio_set"}, {"reason": ["task_struct->personality"], "call": "personality"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "remap_file_pages"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "getppid"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "mq_timedreceive"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "capget"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_setaffinity"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "signal"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "semtimedop"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "umount"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "setsid"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sigaltstack"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_setattr"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "migrate_pages"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "getitimer"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "setpgid"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "getsid"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "prlimit64"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "perf_event_open"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "shmdt"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "rt_sigaction"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "getpgid"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "brk"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "getpriority"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sigaction"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "setns"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "fork"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "get_mempolicy"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "get_robust_list"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "mq_timedsend"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_getscheduler"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "ptrace"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "munlockall"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "madvise"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_getattr"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "getrusage"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_setscheduler"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "setitimer"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "ioprio_get"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "vfork"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "mremap"}, {"reason": ["task_struct->personality", "task_struct->mm", "vm_area_struct->vm_flags", "vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "prctl"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "move_pages"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "munlock"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "setpriority"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "mincore"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "clone"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_getparam"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "mlockall"}], "signalfd4": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["file->f_op"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["file->f_op"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["file->f_op"], "call": "memfd_create"}, {"reason": ["file->f_op"], "call": "remap_file_pages"}, {"reason": ["file->f_op"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["file->f_op"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["file->f_op", "fd->flags"], "call": "epoll_ctl"}, {"reason": ["file->f_op", "fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_op"], "call": "openat"}, {"reason": ["file->f_op"], "call": "uselib"}, {"reason": ["file->f_op", "fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_op"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["file->f_op"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["file->f_op"], "call": "socket"}, {"reason": ["file->f_op"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["file->f_op", "fd->flags"], "call": "perf_event_open"}, {"reason": ["file->f_op"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_op"], "call": "acct"}, {"reason": ["file->f_op"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_op"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_op"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["file->f_op"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["file->f_op"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_op"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["file->f_op"], "call": "mq_open"}, {"reason": ["file->f_op"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "madvise": [{"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "remap_file_pages"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "shmdt"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "brk"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "get_mempolicy"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "munlockall"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "pkey_mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mremap"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "prctl"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "munlock"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mincore"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mlockall"}], "getresuid": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "statfs": [{"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "ustat"}, {"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "fstatfs"}, {"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "fstatfs64"}, {"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "statfs64"}], "mount": [{"reason": ["task_struct->personality"], "call": "keyctl"}, {"reason": ["task_struct->personality"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->personality"], "call": "msgrcv"}, {"reason": ["task_struct->personality"], "call": "kill"}, {"reason": ["task_struct->personality"], "call": "sched_getaffinity"}, {"reason": ["task_struct->personality"], "call": "sched_setparam"}, {"reason": ["task_struct->personality"], "call": "ioprio_set"}, {"reason": ["task_struct->personality"], "call": "personality"}, {"reason": ["task_struct->personality"], "call": "getppid"}, {"reason": ["task_struct->personality"], "call": "mq_timedreceive"}, {"reason": ["task_struct->personality"], "call": "capget"}, {"reason": ["task_struct->personality"], "call": "sched_setaffinity"}, {"reason": ["task_struct->personality"], "call": "signal"}, {"reason": ["task_struct->personality"], "call": "semtimedop"}, {"reason": ["task_struct->personality"], "call": "umount"}, {"reason": ["task_struct->personality"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->personality"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->personality"], "call": "setsid"}, {"reason": ["task_struct->personality"], "call": "sigaltstack"}, {"reason": ["task_struct->personality"], "call": "sched_setattr"}, {"reason": ["task_struct->personality"], "call": "migrate_pages"}, {"reason": ["task_struct->personality"], "call": "getitimer"}, {"reason": ["task_struct->personality"], "call": "setpgid"}, {"reason": ["task_struct->personality"], "call": "getsid"}, {"reason": ["task_struct->personality"], "call": "prlimit64"}, {"reason": ["task_struct->personality"], "call": "perf_event_open"}, {"reason": ["task_struct->personality"], "call": "rt_sigaction"}, {"reason": ["task_struct->personality"], "call": "getpgid"}, {"reason": ["task_struct->personality"], "call": "getpriority"}, {"reason": ["task_struct->personality"], "call": "sigaction"}, {"reason": ["task_struct->personality"], "call": "setns"}, {"reason": ["task_struct->personality"], "call": "fork"}, {"reason": ["task_struct->personality"], "call": "get_robust_list"}, {"reason": ["task_struct->personality"], "call": "mq_timedsend"}, {"reason": ["task_struct->personality"], "call": "sched_getscheduler"}, {"reason": ["task_struct->personality"], "call": "ptrace"}, {"reason": ["task_struct->personality"], "call": "sched_getattr"}, {"reason": ["task_struct->personality"], "call": "getrusage"}, {"reason": ["task_struct->personality"], "call": "sched_setscheduler"}, {"reason": ["task_struct->personality"], "call": "setitimer"}, {"reason": ["task_struct->personality"], "call": "ioprio_get"}, {"reason": ["task_struct->personality"], "call": "vfork"}, {"reason": ["task_struct->personality"], "call": "prctl"}, {"reason": ["task_struct->personality"], "call": "move_pages"}, {"reason": ["task_struct->personality"], "call": "setpriority"}, {"reason": ["task_struct->personality"], "call": "clone"}, {"reason": ["task_struct->personality"], "call": "sched_getparam"}], "timerfd_gettime": [{"reason": ["timerfd_ctx->tintv", "timerfd_ctx->expired"], "call": "timerfd_settime"}, {"reason": ["timerfd_ctx->tintv", "timerfd_ctx->expired"], "call": "timerfd_create"}], "fchownat": [{"reason": ["path->dentry"], "call": "eventfd2"}, {"reason": ["path->dentry"], "call": "swapoff"}, {"reason": ["path->dentry"], "call": "pivot_root"}, {"reason": ["path->dentry"], "call": "memfd_create"}, {"reason": ["path->dentry"], "call": "remap_file_pages"}, {"reason": ["path->dentry"], "call": "dup3"}, {"reason": ["path->dentry"], "call": "unshare"}, {"reason": ["path->dentry"], "call": "epoll_create1"}, {"reason": ["path->dentry"], "call": "epoll_ctl"}, {"reason": ["path->dentry"], "call": "flock"}, {"reason": ["path->dentry"], "call": "openat"}, {"reason": ["path->dentry"], "call": "lookup_dcookie"}, {"reason": ["path->dentry"], "call": "uselib"}, {"reason": ["path->dentry"], "call": "accept4"}, {"reason": ["path->dentry"], "call": "socketpair"}, {"reason": ["path->dentry"], "call": "getcwd"}, {"reason": ["path->dentry"], "call": "shmat"}, {"reason": ["path->dentry"], "call": "socket"}, {"reason": ["path->dentry"], "call": "pipe2"}, {"reason": ["path->dentry"], "call": "perf_event_open"}, {"reason": ["path->dentry"], "call": "shmdt"}, {"reason": ["path->dentry"], "call": "quotactl"}, {"reason": ["path->dentry"], "call": "acct"}, {"reason": ["path->dentry"], "call": "open"}, {"reason": ["path->dentry"], "call": "dup"}, {"reason": ["path->dentry"], "call": "setns"}, {"reason": ["path->dentry"], "call": "shmctl"}, {"reason": ["path->dentry"], "call": "swapon"}, {"reason": ["path->dentry"], "call": "mmap_pgoff"}, {"reason": ["path->dentry"], "call": "mq_open"}, {"reason": ["path->dentry"], "call": "open_by_handle_at"}], "getrusage": [{"reason": ["signal_struct->maxrss"], "call": "timer_create"}, {"reason": ["signal_struct->maxrss"], "call": "exit_group"}], "fstat": [{"reason": ["__old_kernel_stat->st_nlink", "__old_kernel_stat->st_ino"], "call": "lstat"}, {"reason": ["__old_kernel_stat->st_nlink", "__old_kernel_stat->st_ino"], "call": "stat"}, {"reason": ["kstat->ino", "kstat->nlink", "kstat->rdev", "kstat->dev"], "call": "newfstat"}], "timerfd_settime": [{"reason": ["timerfd_ctx->tintv", "timerfd_ctx->expired"], "call": "timerfd_gettime"}, {"reason": ["timerfd_ctx->tintv", "timerfd_ctx->expired"], "call": "timerfd_create"}], "setresuid": [{"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setfsuid"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getresuid16"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getresgid"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setgid"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["cred->user", "cred->user_ns"], "call": "capset"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getresgid16"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setfsgid"}, {"reason": ["cred->user", "cred->user_ns"], "call": "unshare"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["cred->uid", "cred->user", "cred->suid", "cred->euid", "cred->user_ns"], "call": "setreuid"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["cred->user", "cred->user_ns"], "call": "epoll_create1"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getresuid"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setresgid"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setregid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getgroups16"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["cred->user", "cred->user_ns"], "call": "faccessat"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["cred->uid", "cred->user", "cred->suid", "cred->euid", "cred->user_ns"], "call": "setuid"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getgroups"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "ioprio_get": [{"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "keyctl"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "msgrcv"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "kill"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "sched_getaffinity"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "sched_setparam"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "ioprio_set"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "getppid"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "mq_timedreceive"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "capget"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "sched_setaffinity"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "signal"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "semtimedop"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "umount"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "setsid"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "sigaltstack"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "sched_setattr"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "migrate_pages"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "getitimer"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "setpgid"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "getsid"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "prlimit64"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "perf_event_open"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "rt_sigaction"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "getpgid"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "getpriority"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "sigaction"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "setns"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "fork"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "get_robust_list"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "mq_timedsend"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "sched_getscheduler"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "ptrace"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "sched_getattr"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "getrusage"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "sched_setscheduler"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "setitimer"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "vfork"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "prctl"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "move_pages"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "setpriority"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "clone"}, {"reason": ["task_struct->real_cred", "task_struct->cred", "task_struct->io_context"], "call": "sched_getparam"}], "setuid": [{"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setfsuid"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getresuid16"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getresgid"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setgid"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["cred->user", "cred->user_ns"], "call": "capset"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getresgid16"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setfsgid"}, {"reason": ["cred->user", "cred->user_ns"], "call": "unshare"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["cred->uid", "cred->user_ns", "cred->suid", "cred->user"], "call": "setreuid"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["cred->user", "cred->user_ns"], "call": "epoll_create1"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getresuid"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setresgid"}, {"reason": ["cred->user", "cred->user_ns"], "call": "setregid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getgroups16"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["cred->user", "cred->user_ns"], "call": "faccessat"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->uid", "cred->user_ns", "cred->suid", "cred->user"], "call": "setresuid"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["cred->user", "cred->user_ns"], "call": "getgroups"}, {"reason": ["cred->user", "cred->user_ns", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "io_setup": [{"reason": ["kioctx->cpu", "kioctx->max_reqs", "kioctx->req_batch", "kioctx->mmap_base", "kioctx->mmap_size"], "call": "io_getevents"}, {"reason": ["kioctx->cpu", "kioctx->max_reqs", "kioctx->req_batch", "kioctx->mmap_base", "kioctx->mmap_size"], "call": "io_submit"}, {"reason": ["kioctx->cpu", "kioctx->max_reqs", "kioctx->req_batch", "kioctx->mmap_base", "kioctx->mmap_size"], "call": "io_destroy"}, {"reason": ["kioctx->cpu", "kioctx->max_reqs", "kioctx->req_batch", "kioctx->mmap_base", "kioctx->mmap_size"], "call": "io_cancel"}], "mprotect": [{"reason": ["task_struct->personality", "task_struct->mm"], "call": "keyctl"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "msgrcv"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "kill"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_getaffinity"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_setparam"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "ioprio_set"}, {"reason": ["task_struct->personality"], "call": "personality"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "remap_file_pages"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "getppid"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "mq_timedreceive"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "capget"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_setaffinity"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "signal"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "semtimedop"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "umount"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "setsid"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sigaltstack"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_setattr"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "migrate_pages"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "getitimer"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "setpgid"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "getsid"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "prlimit64"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "perf_event_open"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "shmdt"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "rt_sigaction"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "getpgid"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "brk"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "getpriority"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sigaction"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "setns"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "fork"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "get_mempolicy"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "get_robust_list"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "mq_timedsend"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_getscheduler"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "ptrace"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "munlockall"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "pkey_mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "madvise"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_getattr"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "getrusage"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_setscheduler"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "setitimer"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "ioprio_get"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "vfork"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "mremap"}, {"reason": ["task_struct->personality", "task_struct->mm", "vm_area_struct->vm_flags", "vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "prctl"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "move_pages"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "munlock"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "setpriority"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "mincore"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "clone"}, {"reason": ["task_struct->personality", "task_struct->mm"], "call": "sched_getparam"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_flags", "vm_area_struct->vm_end"], "call": "mlockall"}], "mmap_pgoff": [{"reason": ["file->f_op"], "call": "eventfd2"}, {"reason": ["file->f_op"], "call": "swapoff"}, {"reason": ["file->f_op"], "call": "memfd_create"}, {"reason": ["file->f_op"], "call": "remap_file_pages"}, {"reason": ["file->f_op"], "call": "dup3"}, {"reason": ["file->f_op"], "call": "epoll_create1"}, {"reason": ["file->f_op"], "call": "epoll_ctl"}, {"reason": ["file->f_op"], "call": "flock"}, {"reason": ["file->f_op"], "call": "openat"}, {"reason": ["file->f_op"], "call": "uselib"}, {"reason": ["file->f_op"], "call": "accept4"}, {"reason": ["file->f_op"], "call": "socketpair"}, {"reason": ["file->f_op"], "call": "shmat"}, {"reason": ["file->f_op"], "call": "socket"}, {"reason": ["file->f_op"], "call": "pipe2"}, {"reason": ["file->f_op"], "call": "perf_event_open"}, {"reason": ["file->f_op"], "call": "shmdt"}, {"reason": ["file->f_op"], "call": "acct"}, {"reason": ["file->f_op"], "call": "open"}, {"reason": ["file->f_op"], "call": "dup"}, {"reason": ["file->f_op"], "call": "setns"}, {"reason": ["file->f_op"], "call": "shmctl"}, {"reason": ["file->f_op"], "call": "swapon"}, {"reason": ["file->f_op"], "call": "mq_open"}, {"reason": ["file->f_op"], "call": "open_by_handle_at"}], "mremap": [{"reason": ["task_struct->personality"], "call": "keyctl"}, {"reason": ["task_struct->personality"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->personality"], "call": "msgrcv"}, {"reason": ["task_struct->personality"], "call": "kill"}, {"reason": ["mm_struct->map_count"], "call": "swapoff"}, {"reason": ["task_struct->personality"], "call": "sched_getaffinity"}, {"reason": ["task_struct->personality"], "call": "sched_setparam"}, {"reason": ["task_struct->personality"], "call": "ioprio_set"}, {"reason": ["task_struct->personality"], "call": "personality"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_next", "vm_area_struct->vm_file", "vm_area_struct->vm_ops", "vm_area_struct->vm_flags", "mm_struct->map_count", "vm_area_struct->vm_pgoff", "vm_area_struct->vm_end"], "call": "remap_file_pages"}, {"reason": ["mm_struct->map_count"], "call": "io_getevents"}, {"reason": ["task_struct->personality"], "call": "getppid"}, {"reason": ["task_struct->personality"], "call": "mq_timedreceive"}, {"reason": ["task_struct->personality"], "call": "capget"}, {"reason": ["task_struct->personality"], "call": "sched_setaffinity"}, {"reason": ["task_struct->personality"], "call": "signal"}, {"reason": ["task_struct->personality"], "call": "semtimedop"}, {"reason": ["task_struct->personality"], "call": "umount"}, {"reason": ["task_struct->personality"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->personality"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->personality"], "call": "setsid"}, {"reason": ["task_struct->personality"], "call": "sigaltstack"}, {"reason": ["task_struct->personality"], "call": "sched_setattr"}, {"reason": ["task_struct->personality", "mm_struct->map_count"], "call": "migrate_pages"}, {"reason": ["task_struct->personality"], "call": "getitimer"}, {"reason": ["task_struct->personality"], "call": "setpgid"}, {"reason": ["task_struct->personality"], "call": "getsid"}, {"reason": ["task_struct->personality"], "call": "prlimit64"}, {"reason": ["task_struct->personality"], "call": "perf_event_open"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_next", "vm_area_struct->vm_file", "vm_area_struct->vm_ops", "vm_area_struct->vm_flags", "mm_struct->map_count", "vm_area_struct->vm_pgoff", "vm_area_struct->vm_end"], "call": "shmdt"}, {"reason": ["task_struct->personality"], "call": "rt_sigaction"}, {"reason": ["task_struct->personality"], "call": "getpgid"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_next", "vm_area_struct->vm_file", "vm_area_struct->vm_ops", "vm_area_struct->vm_flags", "mm_struct->map_count", "vm_area_struct->vm_pgoff", "vm_area_struct->vm_end"], "call": "brk"}, {"reason": ["task_struct->personality"], "call": "getpriority"}, {"reason": ["task_struct->personality"], "call": "sigaction"}, {"reason": ["task_struct->personality"], "call": "setns"}, {"reason": ["task_struct->personality"], "call": "fork"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_next", "vm_area_struct->vm_file", "vm_area_struct->vm_ops", "vm_area_struct->vm_flags", "mm_struct->map_count", "vm_area_struct->vm_pgoff", "vm_area_struct->vm_end"], "call": "get_mempolicy"}, {"reason": ["task_struct->personality"], "call": "get_robust_list"}, {"reason": ["task_struct->personality"], "call": "mq_timedsend"}, {"reason": ["task_struct->personality"], "call": "sched_getscheduler"}, {"reason": ["task_struct->personality"], "call": "ptrace"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_next", "vm_area_struct->vm_file", "vm_area_struct->vm_ops", "vm_area_struct->vm_flags", "vm_area_struct->vm_pgoff", "vm_area_struct->vm_end"], "call": "munlockall"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_next", "vm_area_struct->vm_file", "vm_area_struct->vm_ops", "vm_area_struct->vm_flags", "vm_area_struct->vm_pgoff", "vm_area_struct->vm_end"], "call": "pkey_mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_next", "vm_area_struct->vm_file", "vm_area_struct->vm_ops", "vm_area_struct->vm_flags", "vm_area_struct->vm_pgoff", "vm_area_struct->vm_end"], "call": "madvise"}, {"reason": ["task_struct->personality"], "call": "sched_getattr"}, {"reason": ["task_struct->personality", "mm_struct->map_count"], "call": "getrusage"}, {"reason": ["task_struct->personality"], "call": "sched_setscheduler"}, {"reason": ["task_struct->personality"], "call": "setitimer"}, {"reason": ["task_struct->personality"], "call": "ioprio_get"}, {"reason": ["task_struct->personality"], "call": "vfork"}, {"reason": ["mm_struct->map_count"], "call": "io_setup"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_next", "vm_area_struct->vm_file", "vm_area_struct->vm_ops", "vm_area_struct->vm_flags", "vm_area_struct->vm_pgoff", "vm_area_struct->vm_end"], "call": "mprotect"}, {"reason": ["mm_struct->map_count"], "call": "io_destroy"}, {"reason": ["mm_struct->map_count"], "call": "mbind"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_next", "task_struct->personality", "vm_area_struct->vm_file", "vm_area_struct->vm_ops", "vm_area_struct->vm_flags", "mm_struct->map_count", "vm_area_struct->vm_pgoff", "vm_area_struct->vm_end"], "call": "prctl"}, {"reason": ["task_struct->personality", "mm_struct->map_count"], "call": "move_pages"}, {"reason": ["mm_struct->map_count"], "call": "modify_ldt"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_next", "vm_area_struct->vm_file", "vm_area_struct->vm_ops", "vm_area_struct->vm_flags", "vm_area_struct->vm_pgoff", "vm_area_struct->vm_end"], "call": "munlock"}, {"reason": ["task_struct->personality"], "call": "setpriority"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_next", "vm_area_struct->vm_file", "vm_area_struct->vm_ops", "vm_area_struct->vm_flags", "mm_struct->map_count", "vm_area_struct->vm_pgoff", "vm_area_struct->vm_end"], "call": "mincore"}, {"reason": ["task_struct->personality"], "call": "clone"}, {"reason": ["task_struct->personality"], "call": "sched_getparam"}, {"reason": ["mm_struct->map_count"], "call": "io_cancel"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_next", "vm_area_struct->vm_file", "vm_area_struct->vm_ops", "vm_area_struct->vm_flags", "vm_area_struct->vm_pgoff", "vm_area_struct->vm_end"], "call": "mlockall"}], "geteuid": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "io_destroy": [{"reason": ["mm_struct->ioctx_table"], "call": "swapoff"}, {"reason": ["mm_struct->ioctx_table"], "call": "remap_file_pages"}, {"reason": ["kioctx->max_reqs", "kioctx_table->nr", "kioctx->mmap_size", "kioctx->mmap_base", "mm_struct->ioctx_table", "kioctx->user_id"], "call": "io_getevents"}, {"reason": ["mm_struct->ioctx_table"], "call": "migrate_pages"}, {"reason": ["mm_struct->ioctx_table"], "call": "shmdt"}, {"reason": ["mm_struct->ioctx_table"], "call": "brk"}, {"reason": ["mm_struct->ioctx_table"], "call": "get_mempolicy"}, {"reason": ["kioctx->max_reqs", "kioctx->user_id", "kioctx->mmap_base", "kioctx->mmap_size"], "call": "io_submit"}, {"reason": ["mm_struct->ioctx_table"], "call": "getrusage"}, {"reason": ["kioctx->max_reqs", "kioctx_table->nr", "kioctx->mmap_size", "kioctx->mmap_base", "mm_struct->ioctx_table", "kioctx->user_id"], "call": "io_setup"}, {"reason": ["mm_struct->ioctx_table"], "call": "mremap"}, {"reason": ["mm_struct->ioctx_table"], "call": "mbind"}, {"reason": ["mm_struct->ioctx_table"], "call": "prctl"}, {"reason": ["mm_struct->ioctx_table"], "call": "move_pages"}, {"reason": ["mm_struct->ioctx_table"], "call": "modify_ldt"}, {"reason": ["mm_struct->ioctx_table"], "call": "mincore"}, {"reason": ["kioctx->max_reqs", "kioctx_table->nr", "kioctx->mmap_size", "kioctx->mmap_base", "mm_struct->ioctx_table", "kioctx->user_id"], "call": "io_cancel"}], "pread64": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags", "file->f_mode"], "call": "epoll_ctl"}, {"reason": ["fd->flags", "file->f_mode"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["fd->flags", "file->f_mode"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags", "file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "preadv64v2": [{"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_mode"], "call": "flock"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["file->f_mode"], "call": "accept4"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}], "prctl": [{"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "keyctl"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "msgrcv"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "kill"}, {"reason": ["mm_struct->flags"], "call": "swapoff"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "sched_getaffinity"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "sched_setparam"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "ioprio_set"}, {"reason": ["task_struct->personality"], "call": "personality"}, {"reason": ["mm_struct->flags"], "call": "remap_file_pages"}, {"reason": ["mm_struct->flags"], "call": "io_getevents"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "getppid"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "mq_timedreceive"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "capget"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "sched_setaffinity"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "signal"}, {"reason": ["task_struct->flags"], "call": "setreuid"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "semtimedop"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "umount"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "setsid"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "sigaltstack"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "sched_setattr"}, {"reason": ["mm_struct->flags", "task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "migrate_pages"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "getitimer"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "setpgid"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "getsid"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "prlimit64"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "perf_event_open"}, {"reason": ["mm_struct->flags"], "call": "shmdt"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "rt_sigaction"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "getpgid"}, {"reason": ["mm_struct->flags"], "call": "brk"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "getpriority"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "sigaction"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "setns"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "fork"}, {"reason": ["mm_struct->flags"], "call": "get_mempolicy"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "get_robust_list"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "mq_timedsend"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "sched_getscheduler"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "ptrace"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "sched_getattr"}, {"reason": ["mm_struct->flags", "task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "getrusage"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "sched_setscheduler"}, {"reason": ["task_struct->flags"], "call": "setresuid"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "setitimer"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "ioprio_get"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "vfork"}, {"reason": ["task_struct->flags"], "call": "setuid"}, {"reason": ["mm_struct->flags"], "call": "io_setup"}, {"reason": ["mm_struct->flags"], "call": "mremap"}, {"reason": ["mm_struct->flags"], "call": "io_destroy"}, {"reason": ["mm_struct->flags"], "call": "mbind"}, {"reason": ["mm_struct->flags", "task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "move_pages"}, {"reason": ["mm_struct->flags"], "call": "modify_ldt"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "setpriority"}, {"reason": ["mm_struct->flags"], "call": "mincore"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "clone"}, {"reason": ["task_struct->personality", "task_struct->timer_slack_ns", "task_struct->flags"], "call": "sched_getparam"}, {"reason": ["mm_struct->flags"], "call": "io_cancel"}], "copy_file_range": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "flock": [{"reason": ["fd->flags", "super_block->s_flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["super_block->s_flags"], "call": "ustat"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["super_block->s_flags"], "call": "umount"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags", "file->f_mode"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["fd->flags", "file->f_mode"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags", "file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["super_block->s_flags"], "call": "quotactl"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["super_block->s_flags", "file->f_mode"], "call": "swapon"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "fstatfs": [{"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "ustat"}, {"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "statfs"}, {"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "fstatfs64"}, {"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "statfs64"}], "modify_ldt": [{"reason": ["mm_context_t->ldt"], "call": "swapoff"}, {"reason": ["mm_context_t->ldt"], "call": "remap_file_pages"}, {"reason": ["mm_context_t->ldt"], "call": "io_getevents"}, {"reason": ["user_desc->limit_in_pages", "user_desc->read_exec_only", "user_desc->limit", "user_desc->useable", "user_desc->contents", "user_desc->seg_32bit", "user_desc->seg_not_present", "user_desc->entry_number", "user_desc->base_addr"], "call": "get_thread_area"}, {"reason": ["mm_context_t->ldt"], "call": "migrate_pages"}, {"reason": ["mm_context_t->ldt"], "call": "shmdt"}, {"reason": ["mm_context_t->ldt"], "call": "brk"}, {"reason": ["mm_context_t->ldt"], "call": "get_mempolicy"}, {"reason": ["mm_context_t->ldt"], "call": "getrusage"}, {"reason": ["mm_context_t->ldt"], "call": "io_setup"}, {"reason": ["mm_context_t->ldt"], "call": "mremap"}, {"reason": ["mm_context_t->ldt"], "call": "io_destroy"}, {"reason": ["mm_context_t->ldt"], "call": "mbind"}, {"reason": ["mm_context_t->ldt"], "call": "prctl"}, {"reason": ["mm_context_t->ldt"], "call": "move_pages"}, {"reason": ["mm_context_t->ldt"], "call": "mincore"}, {"reason": ["user_desc->limit_in_pages", "user_desc->read_exec_only", "user_desc->limit", "user_desc->useable", "user_desc->contents", "user_desc->seg_32bit", "user_desc->base_addr", "user_desc->entry_number", "user_desc->seg_not_present"], "call": "set_thread_area"}, {"reason": ["mm_context_t->ldt"], "call": "io_cancel"}], "sched_getattr": [{"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "kill"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "getppid"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "mq_timedreceive"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "capget"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "signal"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "semtimedop"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "umount"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "setsid"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg", "sched_attr->size"], "call": "sched_setattr"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "getsid"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "perf_event_open"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "setns"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "fork"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "mq_timedsend"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "vfork"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "prctl"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "clone"}, {"reason": ["task_struct->policy", "task_struct->sched_reset_on_fork", "mm_segment_t->seg"], "call": "sched_getparam"}], "sched_getparam": [{"reason": ["task_struct->policy"], "call": "keyctl"}, {"reason": ["task_struct->policy"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->policy"], "call": "msgrcv"}, {"reason": ["task_struct->policy"], "call": "kill"}, {"reason": ["task_struct->policy"], "call": "sched_getaffinity"}, {"reason": ["task_struct->policy"], "call": "sched_setparam"}, {"reason": ["task_struct->policy"], "call": "ioprio_set"}, {"reason": ["task_struct->policy"], "call": "getppid"}, {"reason": ["task_struct->policy"], "call": "mq_timedreceive"}, {"reason": ["task_struct->policy"], "call": "capget"}, {"reason": ["task_struct->policy"], "call": "sched_setaffinity"}, {"reason": ["task_struct->policy"], "call": "signal"}, {"reason": ["task_struct->policy"], "call": "semtimedop"}, {"reason": ["task_struct->policy"], "call": "umount"}, {"reason": ["task_struct->policy"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->policy"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->policy"], "call": "setsid"}, {"reason": ["task_struct->policy"], "call": "sigaltstack"}, {"reason": ["task_struct->policy"], "call": "sched_setattr"}, {"reason": ["task_struct->policy"], "call": "migrate_pages"}, {"reason": ["task_struct->policy"], "call": "getitimer"}, {"reason": ["task_struct->policy"], "call": "setpgid"}, {"reason": ["task_struct->policy"], "call": "getsid"}, {"reason": ["task_struct->policy"], "call": "prlimit64"}, {"reason": ["task_struct->policy"], "call": "perf_event_open"}, {"reason": ["task_struct->policy"], "call": "rt_sigaction"}, {"reason": ["task_struct->policy"], "call": "getpgid"}, {"reason": ["task_struct->policy"], "call": "getpriority"}, {"reason": ["task_struct->policy"], "call": "sigaction"}, {"reason": ["task_struct->policy"], "call": "setns"}, {"reason": ["task_struct->policy"], "call": "fork"}, {"reason": ["task_struct->policy"], "call": "get_robust_list"}, {"reason": ["task_struct->policy"], "call": "mq_timedsend"}, {"reason": ["task_struct->policy"], "call": "sched_getscheduler"}, {"reason": ["task_struct->policy"], "call": "ptrace"}, {"reason": ["task_struct->policy"], "call": "sched_getattr"}, {"reason": ["task_struct->policy"], "call": "getrusage"}, {"reason": ["task_struct->policy"], "call": "sched_setscheduler"}, {"reason": ["task_struct->policy"], "call": "setitimer"}, {"reason": ["task_struct->policy"], "call": "ioprio_get"}, {"reason": ["task_struct->policy"], "call": "vfork"}, {"reason": ["task_struct->policy"], "call": "prctl"}, {"reason": ["task_struct->policy"], "call": "move_pages"}, {"reason": ["task_struct->policy"], "call": "setpriority"}, {"reason": ["task_struct->policy"], "call": "clone"}], "fstatfs64": [{"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "ustat"}, {"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "fstatfs"}, {"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "statfs"}, {"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "statfs64"}], "rt_sigreturn": [{"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "keyctl"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "rt_sigtimedwait"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "msgrcv"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "kill"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "sched_getaffinity"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "sched_setparam"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "ioprio_set"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "getppid"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "ioperm"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "mq_timedreceive"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "capget"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "sched_setaffinity"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "signal"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "semtimedop"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "umount"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "sched_rr_get_interval"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "rt_sigprocmask"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "setsid"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "sigaltstack"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "sched_setattr"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "migrate_pages"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "getitimer"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "setpgid"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "getsid"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "prlimit64"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "perf_event_open"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "rt_sigaction"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "getpgid"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "getpriority"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "sigaction"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "setns"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "fork"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "get_robust_list"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "mq_timedsend"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "sched_getscheduler"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "ptrace"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "sched_getattr"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "getrusage"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "sched_setscheduler"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "setitimer"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "ioprio_get"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "vfork"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "prctl"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "move_pages"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "setpriority"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "clone"}, {"reason": ["mm_segment_t->seg", "thread_struct->uaccess_err"], "call": "sched_getparam"}], "write": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "flistxattr"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "tkill": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "munlock": [{"reason": ["task_struct->mm"], "call": "keyctl"}, {"reason": ["task_struct->mm"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->mm"], "call": "msgrcv"}, {"reason": ["task_struct->mm"], "call": "kill"}, {"reason": ["task_struct->mm"], "call": "sched_getaffinity"}, {"reason": ["task_struct->mm"], "call": "sched_setparam"}, {"reason": ["task_struct->mm"], "call": "ioprio_set"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "remap_file_pages"}, {"reason": ["task_struct->mm"], "call": "getppid"}, {"reason": ["task_struct->mm"], "call": "mq_timedreceive"}, {"reason": ["task_struct->mm"], "call": "capget"}, {"reason": ["task_struct->mm"], "call": "sched_setaffinity"}, {"reason": ["task_struct->mm"], "call": "signal"}, {"reason": ["task_struct->mm"], "call": "semtimedop"}, {"reason": ["task_struct->mm"], "call": "umount"}, {"reason": ["task_struct->mm"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->mm"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->mm"], "call": "setsid"}, {"reason": ["task_struct->mm"], "call": "sigaltstack"}, {"reason": ["task_struct->mm"], "call": "sched_setattr"}, {"reason": ["task_struct->mm"], "call": "migrate_pages"}, {"reason": ["task_struct->mm"], "call": "getitimer"}, {"reason": ["task_struct->mm"], "call": "setpgid"}, {"reason": ["task_struct->mm"], "call": "getsid"}, {"reason": ["task_struct->mm"], "call": "prlimit64"}, {"reason": ["task_struct->mm"], "call": "perf_event_open"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "shmdt"}, {"reason": ["task_struct->mm"], "call": "rt_sigaction"}, {"reason": ["task_struct->mm"], "call": "getpgid"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "brk"}, {"reason": ["task_struct->mm"], "call": "getpriority"}, {"reason": ["task_struct->mm"], "call": "sigaction"}, {"reason": ["task_struct->mm"], "call": "setns"}, {"reason": ["task_struct->mm"], "call": "fork"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "get_mempolicy"}, {"reason": ["task_struct->mm"], "call": "get_robust_list"}, {"reason": ["task_struct->mm"], "call": "mq_timedsend"}, {"reason": ["task_struct->mm"], "call": "sched_getscheduler"}, {"reason": ["task_struct->mm"], "call": "ptrace"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "munlockall"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "pkey_mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "madvise"}, {"reason": ["task_struct->mm"], "call": "sched_getattr"}, {"reason": ["task_struct->mm"], "call": "getrusage"}, {"reason": ["task_struct->mm"], "call": "sched_setscheduler"}, {"reason": ["task_struct->mm"], "call": "setitimer"}, {"reason": ["task_struct->mm"], "call": "ioprio_get"}, {"reason": ["task_struct->mm"], "call": "vfork"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mremap"}, {"reason": ["vm_area_struct->vm_start", "task_struct->mm", "vm_area_struct->vm_end"], "call": "prctl"}, {"reason": ["task_struct->mm"], "call": "move_pages"}, {"reason": ["task_struct->mm"], "call": "setpriority"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mincore"}, {"reason": ["task_struct->mm"], "call": "clone"}, {"reason": ["task_struct->mm"], "call": "sched_getparam"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mlockall"}], "setpriority": [{"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "signal"}, {"reason": ["cred->uid"], "call": "setreuid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->uid"], "call": "setresuid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "vfork"}, {"reason": ["cred->uid"], "call": "setuid"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->real_cred", "task_struct->cred"], "call": "sched_getparam"}], "recvmsg": [{"reason": ["socket->file"], "call": "recvfrom"}, {"reason": ["socket->file"], "call": "sendto"}, {"reason": ["socket->file"], "call": "connect"}, {"reason": ["socket->file"], "call": "getsockname"}, {"reason": ["socket->file"], "call": "accept4"}, {"reason": ["socket->file"], "call": "getpeername"}, {"reason": ["socket->file"], "call": "setsockopt"}, {"reason": ["socket->file"], "call": "sendmsg"}, {"reason": ["socket->file"], "call": "shutdown"}, {"reason": ["socket->file"], "call": "getsockopt"}, {"reason": ["socket->file"], "call": "listen"}, {"reason": ["socket->file"], "call": "sendmmsg"}, {"reason": ["socket->file"], "call": "bind"}, {"reason": ["socket->file"], "call": "recvmmsg"}], "shmdt": [{"reason": ["vm_area_struct->vm_pgoff", "vm_area_struct->vm_ops", "vm_area_struct->vm_file"], "call": "remap_file_pages"}, {"reason": ["vm_area_struct->vm_pgoff", "vm_area_struct->vm_ops", "vm_area_struct->vm_file"], "call": "brk"}, {"reason": ["vm_area_struct->vm_pgoff", "vm_area_struct->vm_ops", "vm_area_struct->vm_file"], "call": "get_mempolicy"}, {"reason": ["vm_area_struct->vm_pgoff", "vm_area_struct->vm_ops", "vm_area_struct->vm_file"], "call": "munlockall"}, {"reason": ["vm_area_struct->vm_pgoff", "vm_area_struct->vm_ops", "vm_area_struct->vm_file"], "call": "pkey_mprotect"}, {"reason": ["vm_area_struct->vm_pgoff", "vm_area_struct->vm_ops", "vm_area_struct->vm_file"], "call": "madvise"}, {"reason": ["vm_area_struct->vm_pgoff", "vm_area_struct->vm_ops", "vm_area_struct->vm_file"], "call": "mprotect"}, {"reason": ["vm_area_struct->vm_pgoff", "vm_area_struct->vm_ops", "vm_area_struct->vm_file"], "call": "mremap"}, {"reason": ["vm_area_struct->vm_pgoff", "vm_area_struct->vm_ops", "vm_area_struct->vm_file"], "call": "prctl"}, {"reason": ["vm_area_struct->vm_pgoff", "vm_area_struct->vm_ops", "vm_area_struct->vm_file"], "call": "munlock"}, {"reason": ["vm_area_struct->vm_pgoff", "vm_area_struct->vm_ops", "vm_area_struct->vm_file"], "call": "mincore"}, {"reason": ["vm_area_struct->vm_pgoff", "vm_area_struct->vm_ops", "vm_area_struct->vm_file"], "call": "mlockall"}], "getrlimit": [{"reason": ["rlimit->rlim_max", "rlimit->rlim_cur"], "call": "setrlimit"}, {"reason": ["rlimit->rlim_max", "rlimit->rlim_cur"], "call": "old_getrlimit"}, {"reason": ["rlimit->rlim_max", "rlimit->rlim_cur"], "call": "prlimit64"}], "mincore": [{"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "keyctl"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "msgrcv"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "kill"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "sched_getaffinity"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "sched_setparam"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "ioprio_set"}, {"reason": ["vm_area_struct->vm_start"], "call": "remap_file_pages"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "getppid"}, {"reason": ["mm_segment_t->seg"], "call": "ioperm"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "mq_timedreceive"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "capget"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "sched_setaffinity"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "signal"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "semtimedop"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "umount"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "setsid"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "sigaltstack"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "sched_setattr"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "migrate_pages"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "getitimer"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "setpgid"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "getsid"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "prlimit64"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "perf_event_open"}, {"reason": ["vm_area_struct->vm_start"], "call": "shmdt"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "rt_sigaction"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "getpgid"}, {"reason": ["vm_area_struct->vm_start"], "call": "brk"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "getpriority"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "sigaction"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "setns"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "fork"}, {"reason": ["vm_area_struct->vm_start"], "call": "get_mempolicy"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "get_robust_list"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "mq_timedsend"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "sched_getscheduler"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "ptrace"}, {"reason": ["vm_area_struct->vm_start"], "call": "munlockall"}, {"reason": ["vm_area_struct->vm_start"], "call": "pkey_mprotect"}, {"reason": ["vm_area_struct->vm_start"], "call": "madvise"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "sched_getattr"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "getrusage"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "sched_setscheduler"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "setitimer"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "ioprio_get"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "vfork"}, {"reason": ["vm_area_struct->vm_start"], "call": "mprotect"}, {"reason": ["vm_area_struct->vm_start"], "call": "mremap"}, {"reason": ["vm_area_struct->vm_start", "task_struct->mm", "mm_segment_t->seg"], "call": "prctl"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "move_pages"}, {"reason": ["vm_area_struct->vm_start"], "call": "munlock"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "setpriority"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "clone"}, {"reason": ["task_struct->mm", "mm_segment_t->seg"], "call": "sched_getparam"}, {"reason": ["vm_area_struct->vm_start"], "call": "mlockall"}], "mq_notify": [{"reason": ["sigval->sival_ptr"], "call": "rt_sigtimedwait"}, {"reason": ["file->f_op"], "call": "eventfd2"}, {"reason": ["file->f_op"], "call": "swapoff"}, {"reason": ["file->f_op"], "call": "memfd_create"}, {"reason": ["file->f_op"], "call": "remap_file_pages"}, {"reason": ["file->f_op"], "call": "dup3"}, {"reason": ["sigval->sival_ptr", "sigevent->sigev_signo", "mqueue_inode_info->notify_owner", "sigevent->sigev_notify"], "call": "mq_timedreceive"}, {"reason": ["sigval->sival_ptr", "sigevent->sigev_signo", "sigevent->sigev_notify"], "call": "timer_create"}, {"reason": ["file->f_op"], "call": "epoll_create1"}, {"reason": ["sigval->sival_ptr"], "call": "rt_sigqueueinfo"}, {"reason": ["file->f_op"], "call": "epoll_ctl"}, {"reason": ["file->f_op"], "call": "flock"}, {"reason": ["sigval->sival_ptr"], "call": "tgkill"}, {"reason": ["file->f_op"], "call": "openat"}, {"reason": ["file->f_op"], "call": "uselib"}, {"reason": ["file->f_op"], "call": "accept4"}, {"reason": ["file->f_op"], "call": "socketpair"}, {"reason": ["file->f_op"], "call": "shmat"}, {"reason": ["file->f_op"], "call": "socket"}, {"reason": ["file->f_op"], "call": "pipe2"}, {"reason": ["file->f_op"], "call": "perf_event_open"}, {"reason": ["file->f_op"], "call": "shmdt"}, {"reason": ["file->f_op"], "call": "acct"}, {"reason": ["file->f_op"], "call": "open"}, {"reason": ["sigval->sival_ptr"], "call": "rt_tgsigqueueinfo"}, {"reason": ["sigval->sival_ptr", "sigevent->sigev_signo", "mqueue_inode_info->notify_owner", "sigevent->sigev_notify"], "call": "mq_getsetattr"}, {"reason": ["file->f_op"], "call": "dup"}, {"reason": ["file->f_op"], "call": "setns"}, {"reason": ["sigval->sival_ptr", "sigevent->sigev_signo", "mqueue_inode_info->notify_owner", "sigevent->sigev_notify"], "call": "mq_timedsend"}, {"reason": ["file->f_op"], "call": "shmctl"}, {"reason": ["file->f_op"], "call": "swapon"}, {"reason": ["file->f_op"], "call": "mmap_pgoff"}, {"reason": ["sigval->sival_ptr"], "call": "rt_sigreturn"}, {"reason": ["sigval->sival_ptr"], "call": "tkill"}, {"reason": ["file->f_op"], "call": "mq_open"}, {"reason": ["file->f_op"], "call": "open_by_handle_at"}], "sendfile": [{"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_mode"], "call": "flock"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["file->f_mode"], "call": "accept4"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}], "sendmmsg": [{"reason": ["socket->file"], "call": "recvfrom"}, {"reason": ["socket->file"], "call": "sendto"}, {"reason": ["socket->file"], "call": "connect"}, {"reason": ["socket->file"], "call": "getsockname"}, {"reason": ["socket->file"], "call": "accept4"}, {"reason": ["socket->file"], "call": "getpeername"}, {"reason": ["socket->file"], "call": "setsockopt"}, {"reason": ["socket->file"], "call": "sendmsg"}, {"reason": ["socket->file"], "call": "shutdown"}, {"reason": ["socket->file"], "call": "getsockopt"}, {"reason": ["socket->file"], "call": "listen"}, {"reason": ["socket->file"], "call": "recvmsg"}, {"reason": ["socket->file"], "call": "bind"}, {"reason": ["socket->file"], "call": "recvmmsg"}], "timer_getoverrun": [{"reason": ["task_struct->signal"], "call": "keyctl"}, {"reason": ["task_struct->signal"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->signal"], "call": "msgrcv"}, {"reason": ["task_struct->signal"], "call": "kill"}, {"reason": ["k_itimer->it_signal"], "call": "timer_delete"}, {"reason": ["task_struct->signal"], "call": "sched_getaffinity"}, {"reason": ["task_struct->signal"], "call": "sched_setparam"}, {"reason": ["task_struct->signal"], "call": "ioprio_set"}, {"reason": ["task_struct->signal"], "call": "getppid"}, {"reason": ["task_struct->signal"], "call": "mq_timedreceive"}, {"reason": ["task_struct->signal"], "call": "capget"}, {"reason": ["task_struct->signal"], "call": "sched_setaffinity"}, {"reason": ["task_struct->signal"], "call": "signal"}, {"reason": ["task_struct->signal"], "call": "semtimedop"}, {"reason": ["task_struct->signal"], "call": "umount"}, {"reason": ["k_itimer->it_signal"], "call": "timer_create"}, {"reason": ["task_struct->signal"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->signal"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->signal"], "call": "setsid"}, {"reason": ["task_struct->signal"], "call": "sigaltstack"}, {"reason": ["task_struct->signal"], "call": "sched_setattr"}, {"reason": ["task_struct->signal"], "call": "migrate_pages"}, {"reason": ["task_struct->signal"], "call": "getitimer"}, {"reason": ["task_struct->signal"], "call": "setpgid"}, {"reason": ["k_itimer->it_signal"], "call": "timer_settime"}, {"reason": ["k_itimer->it_signal"], "call": "timer_gettime"}, {"reason": ["task_struct->signal"], "call": "getsid"}, {"reason": ["task_struct->signal"], "call": "prlimit64"}, {"reason": ["task_struct->signal"], "call": "perf_event_open"}, {"reason": ["task_struct->signal"], "call": "rt_sigaction"}, {"reason": ["task_struct->signal"], "call": "getpgid"}, {"reason": ["task_struct->signal"], "call": "getpriority"}, {"reason": ["task_struct->signal"], "call": "sigaction"}, {"reason": ["task_struct->signal"], "call": "setns"}, {"reason": ["task_struct->signal"], "call": "fork"}, {"reason": ["task_struct->signal"], "call": "get_robust_list"}, {"reason": ["task_struct->signal"], "call": "mq_timedsend"}, {"reason": ["task_struct->signal"], "call": "sched_getscheduler"}, {"reason": ["task_struct->signal"], "call": "ptrace"}, {"reason": ["task_struct->signal"], "call": "sched_getattr"}, {"reason": ["task_struct->signal"], "call": "getrusage"}, {"reason": ["task_struct->signal"], "call": "sched_setscheduler"}, {"reason": ["task_struct->signal"], "call": "setitimer"}, {"reason": ["task_struct->signal"], "call": "ioprio_get"}, {"reason": ["task_struct->signal"], "call": "vfork"}, {"reason": ["task_struct->signal"], "call": "prctl"}, {"reason": ["task_struct->signal"], "call": "move_pages"}, {"reason": ["task_struct->signal"], "call": "setpriority"}, {"reason": ["task_struct->signal"], "call": "clone"}, {"reason": ["task_struct->signal"], "call": "sched_getparam"}], "mlock2": [{"reason": ["task_struct->mm"], "call": "keyctl"}, {"reason": ["task_struct->mm"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->mm"], "call": "msgrcv"}, {"reason": ["task_struct->mm"], "call": "kill"}, {"reason": ["task_struct->mm"], "call": "sched_getaffinity"}, {"reason": ["task_struct->mm"], "call": "sched_setparam"}, {"reason": ["task_struct->mm"], "call": "ioprio_set"}, {"reason": ["task_struct->mm"], "call": "getppid"}, {"reason": ["task_struct->mm"], "call": "mq_timedreceive"}, {"reason": ["task_struct->mm"], "call": "capget"}, {"reason": ["task_struct->mm"], "call": "sched_setaffinity"}, {"reason": ["task_struct->mm"], "call": "signal"}, {"reason": ["task_struct->mm"], "call": "semtimedop"}, {"reason": ["task_struct->mm"], "call": "umount"}, {"reason": ["task_struct->mm"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->mm"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->mm"], "call": "setsid"}, {"reason": ["task_struct->mm"], "call": "sigaltstack"}, {"reason": ["task_struct->mm"], "call": "sched_setattr"}, {"reason": ["task_struct->mm"], "call": "migrate_pages"}, {"reason": ["task_struct->mm"], "call": "getitimer"}, {"reason": ["task_struct->mm"], "call": "setpgid"}, {"reason": ["task_struct->mm"], "call": "getsid"}, {"reason": ["task_struct->mm"], "call": "prlimit64"}, {"reason": ["task_struct->mm"], "call": "perf_event_open"}, {"reason": ["task_struct->mm"], "call": "rt_sigaction"}, {"reason": ["task_struct->mm"], "call": "getpgid"}, {"reason": ["task_struct->mm"], "call": "getpriority"}, {"reason": ["task_struct->mm"], "call": "sigaction"}, {"reason": ["task_struct->mm"], "call": "setns"}, {"reason": ["task_struct->mm"], "call": "fork"}, {"reason": ["task_struct->mm"], "call": "get_robust_list"}, {"reason": ["task_struct->mm"], "call": "mq_timedsend"}, {"reason": ["task_struct->mm"], "call": "sched_getscheduler"}, {"reason": ["task_struct->mm"], "call": "ptrace"}, {"reason": ["task_struct->mm"], "call": "sched_getattr"}, {"reason": ["task_struct->mm"], "call": "getrusage"}, {"reason": ["task_struct->mm"], "call": "sched_setscheduler"}, {"reason": ["task_struct->mm"], "call": "setitimer"}, {"reason": ["task_struct->mm"], "call": "ioprio_get"}, {"reason": ["task_struct->mm"], "call": "vfork"}, {"reason": ["task_struct->mm"], "call": "prctl"}, {"reason": ["task_struct->mm"], "call": "move_pages"}, {"reason": ["task_struct->mm"], "call": "setpriority"}, {"reason": ["task_struct->mm"], "call": "clone"}, {"reason": ["task_struct->mm"], "call": "sched_getparam"}], "newfstat": [{"reason": ["stat->st_nlink", "stat->st_ino", "compat_stat->st_nlink", "compat_stat->st_ino"], "call": "newlstat"}, {"reason": ["stat->st_nlink", "stat->st_ino", "compat_stat->st_nlink", "compat_stat->st_ino"], "call": "newfstatat"}, {"reason": ["stat->st_nlink", "stat->st_ino", "compat_stat->st_nlink", "compat_stat->st_ino"], "call": "newstat"}, {"reason": ["kstat->size", "kstat->nlink", "kstat->ino", "kstat->rdev", "kstat->dev"], "call": "fstat"}], "lremovexattr": [{"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["path->dentry", "path->mnt"], "call": "getcwd"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["path->dentry", "path->mnt"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "mq_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "preadv64": [{"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_mode"], "call": "flock"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["file->f_mode"], "call": "accept4"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}], "pwritev64": [{"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_mode"], "call": "flock"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["file->f_mode"], "call": "accept4"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}], "getxattr": [{"reason": ["path->dentry"], "call": "eventfd2"}, {"reason": ["path->dentry"], "call": "swapoff"}, {"reason": ["path->dentry"], "call": "pivot_root"}, {"reason": ["path->dentry"], "call": "memfd_create"}, {"reason": ["path->dentry"], "call": "remap_file_pages"}, {"reason": ["path->dentry"], "call": "dup3"}, {"reason": ["path->dentry"], "call": "unshare"}, {"reason": ["path->dentry"], "call": "epoll_create1"}, {"reason": ["path->dentry"], "call": "epoll_ctl"}, {"reason": ["path->dentry"], "call": "flock"}, {"reason": ["path->dentry"], "call": "openat"}, {"reason": ["path->dentry"], "call": "lookup_dcookie"}, {"reason": ["path->dentry"], "call": "uselib"}, {"reason": ["path->dentry"], "call": "accept4"}, {"reason": ["path->dentry"], "call": "socketpair"}, {"reason": ["path->dentry"], "call": "getcwd"}, {"reason": ["path->dentry"], "call": "shmat"}, {"reason": ["path->dentry"], "call": "socket"}, {"reason": ["path->dentry"], "call": "pipe2"}, {"reason": ["path->dentry"], "call": "perf_event_open"}, {"reason": ["path->dentry"], "call": "shmdt"}, {"reason": ["path->dentry"], "call": "quotactl"}, {"reason": ["path->dentry"], "call": "acct"}, {"reason": ["path->dentry"], "call": "open"}, {"reason": ["path->dentry"], "call": "dup"}, {"reason": ["path->dentry"], "call": "setns"}, {"reason": ["path->dentry"], "call": "shmctl"}, {"reason": ["path->dentry"], "call": "swapon"}, {"reason": ["path->dentry"], "call": "mmap_pgoff"}, {"reason": ["path->dentry"], "call": "mq_open"}, {"reason": ["path->dentry"], "call": "open_by_handle_at"}], "mq_open": [{"reason": ["filename->name"], "call": "sysfs"}, {"reason": ["path->dentry"], "call": "eventfd2"}, {"reason": ["filename->name"], "call": "mq_unlink"}, {"reason": ["filename->name", "path->dentry"], "call": "swapoff"}, {"reason": ["path->dentry"], "call": "pivot_root"}, {"reason": ["path->dentry"], "call": "memfd_create"}, {"reason": ["path->dentry"], "call": "remap_file_pages"}, {"reason": ["path->dentry"], "call": "dup3"}, {"reason": ["path->dentry"], "call": "unshare"}, {"reason": ["path->dentry"], "call": "epoll_create1"}, {"reason": ["path->dentry"], "call": "epoll_ctl"}, {"reason": ["path->dentry"], "call": "flock"}, {"reason": ["filename->name", "path->dentry"], "call": "openat"}, {"reason": ["path->dentry"], "call": "lookup_dcookie"}, {"reason": ["filename->name", "path->dentry"], "call": "uselib"}, {"reason": ["filename->name"], "call": "renameat2"}, {"reason": ["path->dentry"], "call": "accept4"}, {"reason": ["path->dentry"], "call": "socketpair"}, {"reason": ["path->dentry"], "call": "getcwd"}, {"reason": ["path->dentry"], "call": "shmat"}, {"reason": ["path->dentry"], "call": "socket"}, {"reason": ["filename->name"], "call": "symlinkat"}, {"reason": ["path->dentry"], "call": "pipe2"}, {"reason": ["path->dentry"], "call": "perf_event_open"}, {"reason": ["path->dentry"], "call": "shmdt"}, {"reason": ["filename->name", "path->dentry"], "call": "quotactl"}, {"reason": ["filename->name", "path->dentry"], "call": "acct"}, {"reason": ["filename->name", "path->dentry"], "call": "open"}, {"reason": ["filename->name"], "call": "unlink"}, {"reason": ["filename->name"], "call": "rmdir"}, {"reason": ["path->dentry"], "call": "dup"}, {"reason": ["path->dentry"], "call": "setns"}, {"reason": ["path->dentry"], "call": "shmctl"}, {"reason": ["filename->name", "path->dentry"], "call": "swapon"}, {"reason": ["path->dentry"], "call": "mmap_pgoff"}, {"reason": ["filename->name"], "call": "unlinkat"}, {"reason": ["path->dentry"], "call": "open_by_handle_at"}], "statfs64": [{"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "ustat"}, {"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "fstatfs"}, {"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "statfs"}, {"reason": ["kstatfs->f_ffree", "kstatfs->f_files"], "call": "fstatfs64"}], "getgid16": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "set_thread_area": [{"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "keyctl"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "rt_sigtimedwait"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "msgrcv"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "kill"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "sched_getaffinity"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "arch_prctl"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "sched_setparam"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "ioprio_set"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "getppid"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "ioperm"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "mq_timedreceive"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "capget"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "sched_setaffinity"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "signal"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "semtimedop"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "umount"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "sched_rr_get_interval"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "rt_sigprocmask"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "setsid"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "sigaltstack"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "sched_setattr"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "migrate_pages"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "getitimer"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "setpgid"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "getsid"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "prlimit64"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "perf_event_open"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "rt_sigaction"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "getpgid"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "getpriority"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "sigaction"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "setns"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "fork"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "get_robust_list"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "mq_timedsend"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "sched_getscheduler"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "ptrace"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "sched_getattr"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "getrusage"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "sched_setscheduler"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "setitimer"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "ioprio_get"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "vfork"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "prctl"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "move_pages"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "setpriority"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "clone"}, {"reason": ["thread_struct->fsindex", "thread_struct->gsindex"], "call": "sched_getparam"}], "getegid": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "clock_nanosleep": [{"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "rt_sigtimedwait"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_unlink"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapoff"}, {"reason": ["k_clock->nsleep"], "call": "clock_getres"}, {"reason": ["k_clock->nsleep"], "call": "timer_delete"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmod"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "memfd_create"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "readlinkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "io_getevents"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchown"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedreceive"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "utime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "semtimedop"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "settimeofday"}, {"reason": ["k_clock->nsleep"], "call": "timer_create"}, {"reason": ["k_clock->nsleep"], "call": "clock_gettime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sched_rr_get_interval"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_gettime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "pselect6"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "uselib"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmodat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "inotify_add_watch"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec", "k_clock->nsleep"], "call": "timer_settime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ftruncate"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec", "k_clock->nsleep"], "call": "timer_gettime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ioctl"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "linkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "stime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futimesat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "poll"}, {"reason": ["k_clock->nsleep"], "call": "clock_settime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "select"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlink"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "nanosleep"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_getsetattr"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "faccessat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedsend"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapon"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "epoll_wait"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchownat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fstat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_settime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_notify"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "newfstat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlinkat"}, {"reason": ["k_clock->nsleep"], "call": "clock_adjtime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futex"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "recvmmsg"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile64"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ppoll"}], "unlinkat": [{"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["dentry->d_inode"], "call": "mq_unlink"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["dentry->d_inode", "path->dentry", "path->mnt"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["dentry->d_inode"], "call": "mkdirat"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["dentry->d_inode"], "call": "renameat2"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["dentry->d_inode", "path->dentry", "path->mnt"], "call": "getcwd"}, {"reason": ["dentry->d_inode"], "call": "ftruncate"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["dentry->d_inode"], "call": "mknodat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["dentry->d_inode"], "call": "symlinkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["dentry->d_inode"], "call": "linkat"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["path->dentry", "path->mnt"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["dentry->d_inode"], "call": "unlink"}, {"reason": ["dentry->d_inode"], "call": "rmdir"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["dentry->d_inode", "path->dentry", "path->mnt"], "call": "mq_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "open_by_handle_at"}], "getgroups": [{"reason": ["cred->group_info", "task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["cred->group_info"], "call": "setfsuid"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["cred->group_info"], "call": "getresuid16"}, {"reason": ["cred->group_info"], "call": "getresgid"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["cred->group_info"], "call": "setgid"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "ioprio_set"}, {"reason": ["cred->group_info"], "call": "capset"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["cred->group_info"], "call": "getresgid16"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["cred->group_info"], "call": "setfsgid"}, {"reason": ["cred->group_info"], "call": "unshare"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["cred->group_info"], "call": "setreuid"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["cred->group_info"], "call": "epoll_create1"}, {"reason": ["cred->group_info"], "call": "getresuid"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["cred->group_info"], "call": "setresgid"}, {"reason": ["cred->group_info"], "call": "setregid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["cred->group_info"], "call": "getgroups16"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["cred->group_info"], "call": "faccessat"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["cred->group_info"], "call": "setresuid"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["cred->group_info"], "call": "setuid"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["cred->group_info", "task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "clock_adjtime": [{"reason": ["k_clock->clock_adj"], "call": "clock_getres"}, {"reason": ["k_clock->clock_adj"], "call": "timer_delete"}, {"reason": ["k_clock->clock_adj"], "call": "timer_create"}, {"reason": ["k_clock->clock_adj"], "call": "clock_gettime"}, {"reason": ["k_clock->clock_adj"], "call": "timer_settime"}, {"reason": ["k_clock->clock_adj"], "call": "timer_gettime"}, {"reason": ["k_clock->clock_adj"], "call": "clock_settime"}, {"reason": ["k_clock->clock_adj"], "call": "clock_nanosleep"}], "getuid": [{"reason": ["task_struct->cred"], "call": "keyctl"}, {"reason": ["task_struct->cred"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->cred"], "call": "msgrcv"}, {"reason": ["task_struct->cred"], "call": "kill"}, {"reason": ["task_struct->cred"], "call": "sched_getaffinity"}, {"reason": ["task_struct->cred"], "call": "sched_setparam"}, {"reason": ["task_struct->cred"], "call": "ioprio_set"}, {"reason": ["task_struct->cred"], "call": "getppid"}, {"reason": ["task_struct->cred"], "call": "mq_timedreceive"}, {"reason": ["task_struct->cred"], "call": "capget"}, {"reason": ["task_struct->cred"], "call": "sched_setaffinity"}, {"reason": ["task_struct->cred"], "call": "signal"}, {"reason": ["task_struct->cred"], "call": "semtimedop"}, {"reason": ["task_struct->cred"], "call": "umount"}, {"reason": ["task_struct->cred"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->cred"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->cred"], "call": "setsid"}, {"reason": ["task_struct->cred"], "call": "sigaltstack"}, {"reason": ["task_struct->cred"], "call": "sched_setattr"}, {"reason": ["task_struct->cred"], "call": "migrate_pages"}, {"reason": ["task_struct->cred"], "call": "getitimer"}, {"reason": ["task_struct->cred"], "call": "setpgid"}, {"reason": ["task_struct->cred"], "call": "getsid"}, {"reason": ["task_struct->cred"], "call": "prlimit64"}, {"reason": ["task_struct->cred"], "call": "perf_event_open"}, {"reason": ["task_struct->cred"], "call": "rt_sigaction"}, {"reason": ["task_struct->cred"], "call": "getpgid"}, {"reason": ["task_struct->cred"], "call": "getpriority"}, {"reason": ["task_struct->cred"], "call": "sigaction"}, {"reason": ["task_struct->cred"], "call": "setns"}, {"reason": ["task_struct->cred"], "call": "fork"}, {"reason": ["task_struct->cred"], "call": "get_robust_list"}, {"reason": ["task_struct->cred"], "call": "mq_timedsend"}, {"reason": ["task_struct->cred"], "call": "sched_getscheduler"}, {"reason": ["task_struct->cred"], "call": "ptrace"}, {"reason": ["task_struct->cred"], "call": "sched_getattr"}, {"reason": ["task_struct->cred"], "call": "getrusage"}, {"reason": ["task_struct->cred"], "call": "sched_setscheduler"}, {"reason": ["task_struct->cred"], "call": "setitimer"}, {"reason": ["task_struct->cred"], "call": "ioprio_get"}, {"reason": ["task_struct->cred"], "call": "vfork"}, {"reason": ["task_struct->cred"], "call": "prctl"}, {"reason": ["task_struct->cred"], "call": "move_pages"}, {"reason": ["task_struct->cred"], "call": "setpriority"}, {"reason": ["task_struct->cred"], "call": "clone"}, {"reason": ["task_struct->cred"], "call": "sched_getparam"}], "open_by_handle_at": [{"reason": ["path->dentry", "path->mnt"], "call": "eventfd2"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "pivot_root"}, {"reason": ["path->dentry", "path->mnt"], "call": "memfd_create"}, {"reason": ["path->dentry", "path->mnt"], "call": "remap_file_pages"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup3"}, {"reason": ["path->dentry", "path->mnt"], "call": "unshare"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_create1"}, {"reason": ["path->dentry", "path->mnt"], "call": "epoll_ctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "flock"}, {"reason": ["path->dentry", "path->mnt"], "call": "openat"}, {"reason": ["path->dentry", "path->mnt"], "call": "lookup_dcookie"}, {"reason": ["path->dentry", "path->mnt"], "call": "uselib"}, {"reason": ["path->dentry", "path->mnt"], "call": "accept4"}, {"reason": ["path->dentry", "path->mnt"], "call": "socketpair"}, {"reason": ["path->dentry", "path->mnt"], "call": "getcwd"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmat"}, {"reason": ["path->dentry", "path->mnt"], "call": "socket"}, {"reason": ["path->dentry", "path->mnt"], "call": "pipe2"}, {"reason": ["path->dentry", "path->mnt"], "call": "perf_event_open"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmdt"}, {"reason": ["path->dentry", "path->mnt"], "call": "quotactl"}, {"reason": ["path->dentry", "path->mnt"], "call": "acct"}, {"reason": ["path->dentry", "path->mnt"], "call": "open"}, {"reason": ["path->dentry", "path->mnt"], "call": "dup"}, {"reason": ["path->dentry", "path->mnt"], "call": "setns"}, {"reason": ["path->dentry", "path->mnt"], "call": "shmctl"}, {"reason": ["path->dentry", "path->mnt"], "call": "swapon"}, {"reason": ["path->dentry", "path->mnt"], "call": "mmap_pgoff"}, {"reason": ["path->dentry", "path->mnt"], "call": "mq_open"}], "setitimer": [{"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "waitid"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "settimeofday"}, {"reason": ["signal_struct->it_real_incr"], "call": "timer_create"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "adjtimex"}, {"reason": ["itimerval->it_value", "itimerval->it_interval", "timeval->tv_usec", "timeval->tv_sec"], "call": "getitimer"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "select"}, {"reason": ["signal_struct->it_real_incr"], "call": "exit_group"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "wait4"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "getrusage"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "clock_adjtime"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "alarm"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "ppoll"}], "alarm": [{"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "waitid"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "settimeofday"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "adjtimex"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "getitimer"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "select"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "wait4"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "getrusage"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "setitimer"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "clock_adjtime"}, {"reason": ["timeval->tv_usec", "timeval->tv_sec"], "call": "ppoll"}], "flistxattr": [{"reason": ["fd->flags"], "call": "syncfs"}, {"reason": ["fd->flags"], "call": "vmsplice"}, {"reason": ["fd->flags"], "call": "pwritev64"}, {"reason": ["fd->flags"], "call": "fremovexattr"}, {"reason": ["fd->flags"], "call": "readahead"}, {"reason": ["fd->flags"], "call": "getdents"}, {"reason": ["fd->flags"], "call": "writev"}, {"reason": ["fd->flags"], "call": "preadv64"}, {"reason": ["fd->flags"], "call": "fchmod"}, {"reason": ["fd->flags"], "call": "pread64"}, {"reason": ["fd->flags"], "call": "signalfd4"}, {"reason": ["fd->flags"], "call": "read"}, {"reason": ["fd->flags"], "call": "fchown"}, {"reason": ["fd->flags"], "call": "mq_timedreceive"}, {"reason": ["fd->flags"], "call": "utime"}, {"reason": ["fd->flags"], "call": "fsync"}, {"reason": ["fd->flags"], "call": "bpf"}, {"reason": ["fd->flags"], "call": "recvfrom"}, {"reason": ["fd->flags"], "call": "fsetxattr"}, {"reason": ["fd->flags"], "call": "sendto"}, {"reason": ["fd->flags"], "call": "tee"}, {"reason": ["fd->flags"], "call": "sync_file_range"}, {"reason": ["fd->flags"], "call": "lseek"}, {"reason": ["fd->flags"], "call": "connect"}, {"reason": ["fd->flags"], "call": "getsockname"}, {"reason": ["fd->flags"], "call": "epoll_ctl"}, {"reason": ["fd->flags"], "call": "flock"}, {"reason": ["fd->flags"], "call": "pwritev"}, {"reason": ["fd->flags"], "call": "fchdir"}, {"reason": ["fd->flags"], "call": "accept4"}, {"reason": ["fd->flags"], "call": "old_readdir"}, {"reason": ["fd->flags"], "call": "inotify_rm_watch"}, {"reason": ["fd->flags"], "call": "utimensat"}, {"reason": ["fd->flags"], "call": "inotify_add_watch"}, {"reason": ["fd->flags"], "call": "preadv2"}, {"reason": ["fd->flags"], "call": "splice"}, {"reason": ["fd->flags"], "call": "ftruncate"}, {"reason": ["fd->flags"], "call": "preadv"}, {"reason": ["fd->flags"], "call": "getpeername"}, {"reason": ["fd->flags"], "call": "setsockopt"}, {"reason": ["fd->flags"], "call": "fcntl"}, {"reason": ["fd->flags"], "call": "ioctl"}, {"reason": ["fd->flags"], "call": "pwrite64"}, {"reason": ["fd->flags"], "call": "perf_event_open"}, {"reason": ["fd->flags"], "call": "pwritev64v2"}, {"reason": ["fd->flags"], "call": "futimesat"}, {"reason": ["fd->flags"], "call": "pwritev2"}, {"reason": ["fd->flags"], "call": "shutdown"}, {"reason": ["fd->flags"], "call": "getsockopt"}, {"reason": ["fd->flags"], "call": "mq_getsetattr"}, {"reason": ["fd->flags"], "call": "fdatasync"}, {"reason": ["fd->flags"], "call": "getdents64"}, {"reason": ["fd->flags"], "call": "listen"}, {"reason": ["fd->flags"], "call": "copy_file_range"}, {"reason": ["fd->flags"], "call": "mq_timedsend"}, {"reason": ["fd->flags"], "call": "fgetxattr"}, {"reason": ["fd->flags"], "call": "fcntl64"}, {"reason": ["fd->flags"], "call": "fallocate"}, {"reason": ["fd->flags"], "call": "epoll_wait"}, {"reason": ["fd->flags"], "call": "llseek"}, {"reason": ["fd->flags"], "call": "preadv64v2"}, {"reason": ["fd->flags"], "call": "readv"}, {"reason": ["fd->flags"], "call": "fstatfs"}, {"reason": ["fd->flags"], "call": "fstatfs64"}, {"reason": ["fd->flags"], "call": "write"}, {"reason": ["fd->flags"], "call": "mq_notify"}, {"reason": ["fd->flags"], "call": "sendfile"}, {"reason": ["fd->flags"], "call": "bind"}, {"reason": ["fd->flags"], "call": "sendfile64"}], "futex": [{"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "rt_sigtimedwait"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_unlink"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapoff"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmod"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "memfd_create"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "readlinkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "io_getevents"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchown"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedreceive"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "utime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "semtimedop"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "settimeofday"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sched_rr_get_interval"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_gettime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "pselect6"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "uselib"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmodat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "inotify_add_watch"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_settime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ftruncate"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_gettime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ioctl"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "linkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "stime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futimesat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "poll"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "select"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlink"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "nanosleep"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_getsetattr"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "faccessat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedsend"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapon"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "epoll_wait"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchownat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fstat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_settime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_notify"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "newfstat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "clock_nanosleep"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlinkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "recvmmsg"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile64"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ppoll"}], "recvmmsg": [{"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "rt_sigtimedwait"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_unlink"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapoff"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmod"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "memfd_create"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "readlinkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "io_getevents"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchown"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedreceive"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "utime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "semtimedop"}, {"reason": ["socket->file", "msghdr->msg_flags", "socket->sk"], "call": "recvfrom"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "settimeofday"}, {"reason": ["socket->file", "msghdr->msg_flags", "socket->sk"], "call": "sendto"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sched_rr_get_interval"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_gettime"}, {"reason": ["socket->file", "socket->sk"], "call": "connect"}, {"reason": ["socket->file", "socket->sk"], "call": "getsockname"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "pselect6"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "uselib"}, {"reason": ["socket->file", "socket->sk"], "call": "accept4"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmodat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "inotify_add_watch"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_settime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ftruncate"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_gettime"}, {"reason": ["socket->file", "socket->sk"], "call": "getpeername"}, {"reason": ["socket->file", "socket->sk"], "call": "setsockopt"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ioctl"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "linkat"}, {"reason": ["socket->file", "socket->sk"], "call": "sendmsg"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "stime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futimesat"}, {"reason": ["socket->file", "socket->sk"], "call": "shutdown"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "poll"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "select"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlink"}, {"reason": ["socket->file", "socket->sk"], "call": "getsockopt"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "nanosleep"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_getsetattr"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "faccessat"}, {"reason": ["socket->file", "socket->sk"], "call": "listen"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedsend"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapon"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "epoll_wait"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchownat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fstat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_settime"}, {"reason": ["socket->file", "socket->sk"], "call": "recvmsg"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_notify"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile"}, {"reason": ["socket->file", "socket->sk"], "call": "sendmmsg"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "newfstat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "clock_nanosleep"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlinkat"}, {"reason": ["socket->file", "socket->sk"], "call": "bind"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futex"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile64"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ppoll"}], "finit_module": [{"reason": ["module->args", "module->kp", "module_layout->base", "module_layout->size", "module->num_kp"], "call": "delete_module"}, {"reason": ["module->args", "load_info->num_debug", "module->kp", "load_info->debug", "module_layout->size", "module_layout->base", "module->num_kp"], "call": "init_module"}], "sendfile64": [{"reason": ["file->f_mode"], "call": "eventfd2"}, {"reason": ["file->f_mode"], "call": "swapoff"}, {"reason": ["file->f_mode"], "call": "memfd_create"}, {"reason": ["file->f_mode"], "call": "remap_file_pages"}, {"reason": ["file->f_mode"], "call": "dup3"}, {"reason": ["file->f_mode"], "call": "epoll_create1"}, {"reason": ["file->f_mode"], "call": "epoll_ctl"}, {"reason": ["file->f_mode"], "call": "flock"}, {"reason": ["file->f_mode"], "call": "openat"}, {"reason": ["file->f_mode"], "call": "uselib"}, {"reason": ["file->f_mode"], "call": "accept4"}, {"reason": ["file->f_mode"], "call": "socketpair"}, {"reason": ["file->f_mode"], "call": "shmat"}, {"reason": ["file->f_mode"], "call": "socket"}, {"reason": ["file->f_mode"], "call": "pipe2"}, {"reason": ["file->f_mode"], "call": "perf_event_open"}, {"reason": ["file->f_mode"], "call": "shmdt"}, {"reason": ["file->f_mode"], "call": "acct"}, {"reason": ["file->f_mode"], "call": "open"}, {"reason": ["file->f_mode"], "call": "dup"}, {"reason": ["file->f_mode"], "call": "setns"}, {"reason": ["file->f_mode"], "call": "shmctl"}, {"reason": ["file->f_mode"], "call": "swapon"}, {"reason": ["file->f_mode"], "call": "mmap_pgoff"}, {"reason": ["file->f_mode"], "call": "mq_open"}, {"reason": ["file->f_mode"], "call": "open_by_handle_at"}], "mlockall": [{"reason": ["task_struct->personality"], "call": "keyctl"}, {"reason": ["task_struct->personality"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->personality"], "call": "msgrcv"}, {"reason": ["task_struct->personality"], "call": "kill"}, {"reason": ["mm_struct->total_vm"], "call": "swapoff"}, {"reason": ["task_struct->personality"], "call": "sched_getaffinity"}, {"reason": ["task_struct->personality"], "call": "sched_setparam"}, {"reason": ["task_struct->personality"], "call": "ioprio_set"}, {"reason": ["task_struct->personality"], "call": "personality"}, {"reason": ["vm_area_struct->vm_start", "mm_struct->total_vm", "vm_area_struct->vm_end"], "call": "remap_file_pages"}, {"reason": ["mm_struct->total_vm"], "call": "io_getevents"}, {"reason": ["task_struct->personality"], "call": "getppid"}, {"reason": ["task_struct->personality"], "call": "mq_timedreceive"}, {"reason": ["task_struct->personality"], "call": "capget"}, {"reason": ["task_struct->personality"], "call": "sched_setaffinity"}, {"reason": ["task_struct->personality"], "call": "signal"}, {"reason": ["task_struct->personality"], "call": "semtimedop"}, {"reason": ["task_struct->personality"], "call": "umount"}, {"reason": ["task_struct->personality"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->personality"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->personality"], "call": "setsid"}, {"reason": ["task_struct->personality"], "call": "sigaltstack"}, {"reason": ["task_struct->personality"], "call": "sched_setattr"}, {"reason": ["task_struct->personality", "mm_struct->total_vm"], "call": "migrate_pages"}, {"reason": ["task_struct->personality"], "call": "getitimer"}, {"reason": ["task_struct->personality"], "call": "setpgid"}, {"reason": ["task_struct->personality"], "call": "getsid"}, {"reason": ["task_struct->personality"], "call": "prlimit64"}, {"reason": ["task_struct->personality"], "call": "perf_event_open"}, {"reason": ["vm_area_struct->vm_start", "mm_struct->total_vm", "vm_area_struct->vm_end"], "call": "shmdt"}, {"reason": ["task_struct->personality"], "call": "rt_sigaction"}, {"reason": ["task_struct->personality"], "call": "getpgid"}, {"reason": ["vm_area_struct->vm_start", "mm_struct->total_vm", "vm_area_struct->vm_end"], "call": "brk"}, {"reason": ["task_struct->personality"], "call": "getpriority"}, {"reason": ["task_struct->personality"], "call": "sigaction"}, {"reason": ["task_struct->personality"], "call": "setns"}, {"reason": ["task_struct->personality"], "call": "fork"}, {"reason": ["vm_area_struct->vm_start", "mm_struct->total_vm", "vm_area_struct->vm_end"], "call": "get_mempolicy"}, {"reason": ["task_struct->personality"], "call": "get_robust_list"}, {"reason": ["task_struct->personality"], "call": "mq_timedsend"}, {"reason": ["task_struct->personality"], "call": "sched_getscheduler"}, {"reason": ["task_struct->personality"], "call": "ptrace"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "munlockall"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "pkey_mprotect"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "madvise"}, {"reason": ["task_struct->personality"], "call": "sched_getattr"}, {"reason": ["task_struct->personality", "mm_struct->total_vm"], "call": "getrusage"}, {"reason": ["task_struct->personality"], "call": "sched_setscheduler"}, {"reason": ["task_struct->personality"], "call": "setitimer"}, {"reason": ["task_struct->personality"], "call": "ioprio_get"}, {"reason": ["task_struct->personality"], "call": "vfork"}, {"reason": ["mm_struct->total_vm"], "call": "io_setup"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "mprotect"}, {"reason": ["vm_area_struct->vm_start", "mm_struct->total_vm", "vm_area_struct->vm_end"], "call": "mremap"}, {"reason": ["mm_struct->total_vm"], "call": "io_destroy"}, {"reason": ["mm_struct->total_vm"], "call": "mbind"}, {"reason": ["vm_area_struct->vm_start", "task_struct->personality", "mm_struct->total_vm", "vm_area_struct->vm_end"], "call": "prctl"}, {"reason": ["task_struct->personality", "mm_struct->total_vm"], "call": "move_pages"}, {"reason": ["mm_struct->total_vm"], "call": "modify_ldt"}, {"reason": ["vm_area_struct->vm_start", "vm_area_struct->vm_end"], "call": "munlock"}, {"reason": ["task_struct->personality"], "call": "setpriority"}, {"reason": ["vm_area_struct->vm_start", "mm_struct->total_vm", "vm_area_struct->vm_end"], "call": "mincore"}, {"reason": ["task_struct->personality"], "call": "clone"}, {"reason": ["task_struct->personality"], "call": "sched_getparam"}, {"reason": ["mm_struct->total_vm"], "call": "io_cancel"}], "ppoll": [{"reason": ["task_struct->personality"], "call": "keyctl"}, {"reason": ["task_struct->personality", "timespec->tv_sec", "timespec->tv_nsec"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->personality"], "call": "msgrcv"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_unlink"}, {"reason": ["task_struct->personality"], "call": "kill"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapoff"}, {"reason": ["task_struct->personality"], "call": "sched_getaffinity"}, {"reason": ["task_struct->personality"], "call": "sched_setparam"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmod"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "memfd_create"}, {"reason": ["task_struct->personality"], "call": "ioprio_set"}, {"reason": ["task_struct->personality"], "call": "personality"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "readlinkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "io_getevents"}, {"reason": ["task_struct->personality"], "call": "getppid"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchown"}, {"reason": ["task_struct->personality", "timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedreceive"}, {"reason": ["task_struct->personality"], "call": "capget"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "utime"}, {"reason": ["task_struct->personality"], "call": "sched_setaffinity"}, {"reason": ["task_struct->personality"], "call": "signal"}, {"reason": ["task_struct->personality", "timespec->tv_sec", "timespec->tv_nsec"], "call": "semtimedop"}, {"reason": ["task_struct->personality"], "call": "umount"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "settimeofday"}, {"reason": ["task_struct->personality", "timespec->tv_sec", "timespec->tv_nsec"], "call": "sched_rr_get_interval"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_gettime"}, {"reason": ["compat_timespec->tv_sec", "compat_timespec->tv_nsec", "timespec->tv_sec", "timespec->tv_nsec"], "call": "pselect6"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "uselib"}, {"reason": ["task_struct->personality"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->personality"], "call": "setsid"}, {"reason": ["task_struct->personality"], "call": "sigaltstack"}, {"reason": ["task_struct->personality"], "call": "sched_setattr"}, {"reason": ["task_struct->personality"], "call": "migrate_pages"}, {"reason": ["task_struct->personality"], "call": "getitimer"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchmodat"}, {"reason": ["task_struct->personality"], "call": "setpgid"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "inotify_add_watch"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_settime"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ftruncate"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timer_gettime"}, {"reason": ["task_struct->personality"], "call": "getsid"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "ioctl"}, {"reason": ["task_struct->personality"], "call": "prlimit64"}, {"reason": ["task_struct->personality"], "call": "perf_event_open"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "linkat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "stime"}, {"reason": ["task_struct->personality"], "call": "rt_sigaction"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futimesat"}, {"reason": ["task_struct->personality"], "call": "getpgid"}, {"reason": ["poll_list->len", "timespec->tv_sec", "timespec->tv_nsec"], "call": "poll"}, {"reason": ["compat_timespec->tv_sec", "compat_timespec->tv_nsec", "timespec->tv_sec", "timespec->tv_nsec"], "call": "select"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlink"}, {"reason": ["task_struct->personality"], "call": "getpriority"}, {"reason": ["task_struct->personality"], "call": "sigaction"}, {"reason": ["compat_timespec->tv_sec", "compat_timespec->tv_nsec", "timespec->tv_sec", "timespec->tv_nsec"], "call": "nanosleep"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_getsetattr"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "faccessat"}, {"reason": ["task_struct->personality"], "call": "setns"}, {"reason": ["task_struct->personality"], "call": "fork"}, {"reason": ["task_struct->personality"], "call": "get_robust_list"}, {"reason": ["task_struct->personality", "timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_timedsend"}, {"reason": ["task_struct->personality"], "call": "sched_getscheduler"}, {"reason": ["task_struct->personality"], "call": "ptrace"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "swapon"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "epoll_wait"}, {"reason": ["task_struct->personality"], "call": "sched_getattr"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fchownat"}, {"reason": ["task_struct->personality"], "call": "getrusage"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "fstat"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "timerfd_settime"}, {"reason": ["task_struct->personality"], "call": "sched_setscheduler"}, {"reason": ["task_struct->personality"], "call": "setitimer"}, {"reason": ["task_struct->personality"], "call": "ioprio_get"}, {"reason": ["task_struct->personality"], "call": "vfork"}, {"reason": ["task_struct->personality"], "call": "prctl"}, {"reason": ["task_struct->personality"], "call": "move_pages"}, {"reason": ["task_struct->personality"], "call": "setpriority"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "mq_notify"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "newfstat"}, {"reason": ["task_struct->personality"], "call": "clone"}, {"reason": ["compat_timespec->tv_sec", "compat_timespec->tv_nsec", "timespec->tv_sec", "timespec->tv_nsec"], "call": "clock_nanosleep"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "unlinkat"}, {"reason": ["task_struct->personality"], "call": "sched_getparam"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "futex"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "recvmmsg"}, {"reason": ["timespec->tv_sec", "timespec->tv_nsec"], "call": "sendfile64"}], "mlock": [{"reason": ["task_struct->mm"], "call": "keyctl"}, {"reason": ["task_struct->mm"], "call": "rt_sigtimedwait"}, {"reason": ["task_struct->mm"], "call": "msgrcv"}, {"reason": ["task_struct->mm"], "call": "kill"}, {"reason": ["task_struct->mm"], "call": "sched_getaffinity"}, {"reason": ["task_struct->mm"], "call": "sched_setparam"}, {"reason": ["task_struct->mm"], "call": "ioprio_set"}, {"reason": ["task_struct->mm"], "call": "getppid"}, {"reason": ["task_struct->mm"], "call": "mq_timedreceive"}, {"reason": ["task_struct->mm"], "call": "capget"}, {"reason": ["task_struct->mm"], "call": "sched_setaffinity"}, {"reason": ["task_struct->mm"], "call": "signal"}, {"reason": ["task_struct->mm"], "call": "semtimedop"}, {"reason": ["task_struct->mm"], "call": "umount"}, {"reason": ["task_struct->mm"], "call": "sched_rr_get_interval"}, {"reason": ["task_struct->mm"], "call": "rt_sigprocmask"}, {"reason": ["task_struct->mm"], "call": "setsid"}, {"reason": ["task_struct->mm"], "call": "sigaltstack"}, {"reason": ["task_struct->mm"], "call": "sched_setattr"}, {"reason": ["task_struct->mm"], "call": "migrate_pages"}, {"reason": ["task_struct->mm"], "call": "getitimer"}, {"reason": ["task_struct->mm"], "call": "setpgid"}, {"reason": ["task_struct->mm"], "call": "getsid"}, {"reason": ["task_struct->mm"], "call": "prlimit64"}, {"reason": ["task_struct->mm"], "call": "perf_event_open"}, {"reason": ["task_struct->mm"], "call": "rt_sigaction"}, {"reason": ["task_struct->mm"], "call": "getpgid"}, {"reason": ["task_struct->mm"], "call": "getpriority"}, {"reason": ["task_struct->mm"], "call": "sigaction"}, {"reason": ["task_struct->mm"], "call": "setns"}, {"reason": ["task_struct->mm"], "call": "fork"}, {"reason": ["task_struct->mm"], "call": "get_robust_list"}, {"reason": ["task_struct->mm"], "call": "mq_timedsend"}, {"reason": ["task_struct->mm"], "call": "sched_getscheduler"}, {"reason": ["task_struct->mm"], "call": "ptrace"}, {"reason": ["task_struct->mm"], "call": "sched_getattr"}, {"reason": ["task_struct->mm"], "call": "getrusage"}, {"reason": ["task_struct->mm"], "call": "sched_setscheduler"}, {"reason": ["task_struct->mm"], "call": "setitimer"}, {"reason": ["task_struct->mm"], "call": "ioprio_get"}, {"reason": ["task_struct->mm"], "call": "vfork"}, {"reason": ["task_struct->mm"], "call": "prctl"}, {"reason": ["task_struct->mm"], "call": "move_pages"}, {"reason": ["task_struct->mm"], "call": "setpriority"}, {"reason": ["task_struct->mm"], "call": "clone"}, {"reason": ["task_struct->mm"], "call": "sched_getparam"}]}